_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) r1 = socket(0x22, 0x6, 0x1f) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3f, 0x5f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008c0}, 0x80) r4 = syz_open_dev$vcsu(&(0x7f0000000540), 0x63a, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r5, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4258, 0x68}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) [ 179.843004] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 179.844327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 179.846000] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 179.846990] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 179.848236] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 179.849259] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 179.850470] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 179.851643] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 181.043721] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.876429] Bluetooth: hci7: command 0x0c1a tx timeout [ 181.877551] Bluetooth: hci6: command 0x0c1a tx timeout [ 181.878664] Bluetooth: hci4: command 0x0c1a tx timeout [ 181.879861] Bluetooth: hci5: command 0x0c1a tx timeout [ 181.880690] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.881735] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.882230] Bluetooth: hci1: command 0x0c1a tx timeout 15:52:51 executing program 4: tkill(0x0, 0xf) sched_rr_get_interval(0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x5, 0x80000001, 0x4, 0xf09b, 0x7fff, 0x6, 0x3, 0x2}, &(0x7f0000000080)={0x3, 0x6459, 0xffffffff, 0x1000, 0x6, 0x2, 0x96c, 0xe756}, &(0x7f00000000c0)={0x6, 0xbd, 0x6, 0x1df, 0x9, 0xba, 0xfe8, 0x401}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x100]}, 0x8}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000001c0)) r0 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}}, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = syz_open_dev$vcsu(&(0x7f0000002b40), 0x200, 0x800) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:52:51 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "6151afabe440b49174972fd6385f44c413bb552cf75e843bea60aa726612458ac0e2e67151a4b3c35193038748d3fa26e8ad986ff5249b06badd16bfb23fe5eb6179e81fc4c81f29c790a226b7b16e660db579047989c13b77989af5f99bf3dd652e6fdad8e20ea711c42961eb613be2126a7c2ae578d89d928afee53b33f224ff1382b0203fe0857caf6f3f686963cc41c23c65d5fd81d46f411cfdc99404a72668e2b8339d63f7698576f6fe8ca7f12c16885d246a7f9964a8e0f775246aa63bedfb5e5c063fc870678fc814e43e486b1f1ac0355bbcb9f90a1a7c4bded64611023ced0fe079cad87359733a9c2b77817381fa6f335271cc67f699229765302a9eb5c9031b09ef23dcc090a21c18c6488e707d41ad3faaad402de2dcb0468cadefc9884f21b1be58bbb652884357d3b39450b51cd305a0bef94d7cf5faaa2ea78b9e2f33750c3ed6944b83f3be0943c3fbcaf933891d9f6dbdf4490c2c8eeee4e610246d7c230e25b1736865fec415ebad1ccd6f86c6bff65643599434105eac07d3734665d703879a6ac125568200c02e53e708f9784ae6e4e6024e6e1ac3f7a1bba0cd0ffb6c2188ab28d4b4cac820d1a3a091218b8a43b052aeace3425a29f4fe75989b23a2cd68803760889efcbaf6687c1878fdd0e091cd36ada1bee832e445a8c7bf194f34ee5074978a4fc24a215ca2d03fc7d3b307360821012c46d49d14b4829eee0bc3ced2e2b32f98ed04917ebd2b5c2d2124a7582e68dd8fd57da9447acef18203035285a7078fe5dff5b57cc3816d9ded87453f69db274529cae7868662dff4450a9182443293906a03640440ef499ebe367823ac7e0e556a9473a6ae3ae81a91379d932ca850f0a1aa3a120783f1b80e6fd023d97aaa8984f7d21f6d7123491753f9dd8c2d8f5af80c4577c998e16c92e19e591d000b42e47aa84d17af272240da890a9eb3bcd4287870a635298e4a7305bc7da4c3c8912ff790ab7c839fc89d4f6d123d0fe8c554c4a61fe3ed7038b52dcc4ebb6a53ad9e0f3da688bcf9fe797f4fd1369f106e00aa6f491ba54894889151ec1a099c32752a2dd99040343630592afe3594c9f2585d5dfb391f023852b3a3c647071ed5d4daffefdac46a249d88b3706c13a626faf4986a79d68aaa7b0d1eced086ddd5f6e131a38ba3fb387561e1b97a05069fc69c4ce2f6b9b551c0ac002ba5dc98c3ba08b92e085cf938c29bf608c5c997d59ef904f1e85c7992c8d2647f70ddefdc9e9073c2622934b011c92622ac1dd27e3c1848873b4077c30710a076d286d7bd0183aa74aa3ea51f42262c224cdb0a4e06df44a281a1ccc78ffdced217cb41abb90e899514b14d9d70247825e2a388de7ddd135e1b02495ebff492c7a6721f47725c981a6549c574c050988d7312ed536dcc6324af813543e55d665120a4b9d365a1660f162aa0b5b6103d79c0ced4645246cdce6ab1cbbe79e0acd8ab18d7241c4d5bd293d443a506bb33da26cfa61b90ca437c0852c13a042f55e91d0dd18e58de3a413139efdade695e92665bd59f20183ed374ca6acfec7d97eadb7b324d7464b0016595a8c0148f7ee3ded47485c84b87775a64891a5c69f32571a3586c53483d7fc0d9de7c951a570c86ffc2cfd2530d3744d0c6213857088ffdd463fb49249fcee91b34bcce9893e4a9651741c16688eb64f3dd6456bb4ad9a05b3175e27a86f3dc69bc5efe2c91fb7b67bce255f3219118066a5b0d404852a08d2d0cd64ffc80cf3f4b60b1b9d11ff436cc1754b7d361b346b558555eaab58e7f54d1ce161a7bd4d7a4751d6e680405dc79e14cd6489b38a57513ba738ee23d895f045be3f24a520a7a680de7f2e9e894dd2ce8c36c3fc0030cf9d2d309ef45797c442ace71cb3801513bba54018c892e7cd139c82756e67ace776b3055789c028d4aca4df1ce13a8019a29167bcd7ea56e8babd15fea2067cefa73b755c5eafdaa485fc83b613cc48827a310d9603818c95261ecb2b7554a845a8ab3e9289264d5b9b004f799da40083b821a10829504732997950796889e6cf568cfc438c04129d14a7a9590475d2b9f004cc40fa23731cf6fe76b6e5056fc843163ac02d86b445a73c9b684ba4db67c243362f56f720b69251ed638c0460252715230a4a5cbf3ce9bfe2b7d9f5866f87f8280f79199cd5bb113b99b1da19f3373eb417fd0468833f0d56c5c4d8542e53832987186c567dde26e410e4c9c68395ca0ae995c07db508880ded2888577cc4a6a607d0133cdea108ef3204d6d44369820a521314302e1739fd73e80872f8488a8a916477167e091981b5c7fdf677a7bd5ef27e556c98bd806a3f2bf640cd4b5a7927c9591183b13a34443b4fdff8d57f8faf76e09a722309c2de4f0452463c4e8464f836704f5d1efd86b63450ff5b91a04ecfec751e78d48966c2b305e8084e7b2a30d35c6f11cd1f2eff5d1788809f37136b3faa48418ac672b482ed3919f896f32029b3a17ae8101fb54816eefd42dc360c9d26e548ec5ecc054f503d0eb0437d90abc0db43523ea8f707cbdbcb3c95b2153c20fb0d537069505d9009d6005e6bde78c29de2611668562b7e14f26818438ffb3d23d2cdfef114d98fc1af32ebfa2cf281f2f075be191183ddecd2bf420effc56059b012a09c7f8f2e362a40025aafeaa244eb8bc3a10e3f69beaf7178be7a0a676c2c384e26e66f94874626ebfd8bbc382b14e454663f5cb5ddfa7be96d8f512d54309846f7c450538bae159848325eadbe0ea58f2135ebebc90931a61e35210b2ce42c3bdec1364e0390c35e783916c53fcb9ed32b7d3f92ad238d9ac9da0b77e26b958332eb37ef91b98e354a94e7c4d0671ca64bd76cc895d4588b10296d754eb1ba51adc3b5dbdf109e4af58643dfc05ea955b755ec1ea6ca0af3df81b338e572fcab431ed9c1cbd0878d9fe5984927e9840a556eb015e31010c08bf282be79da8dd9521d2193405838876f4ab0b1df85c0318b0584fea6e6d23d3656ec3f7bb2e33d981ea7f355d4fabecb189c9b1b6aebac626699725574ee67ff6f187dd15242418889526dcd31c908911ad0884583104922f0acf33a51510071bdf97130b312d17cee96d98a74a083c980bc3fce6d1fda5bcea8a3bd1da877ab5c628cb4f80c297739b8e4345393d30a854b9f044665e1f3dcb7bdf5c0efc5ccdd95af82c035cdff21be0cee079cb55412eb9f391c9fd9be72cb30b501492dac2b3f59f7ea29eaf54029b304d468cd8356a9acc26daf3117e214b52760b0dd0ae20b6258a4e800287a5bd426f5352524a2de225ab2921b9a903662525b07aae8cf9fd09aa2bff6ced85be92feba713f0a5a6242951ea9d9eaa24008083246e83fc7195facbd48c36ca55b20d672a4fdde227c782cde18c34afea73ce927abcd3f74997986edb550cb006935865d34a367821b6504268ba97b4076750254a1c888c47f46b1382016dfc707ea26d4d4b3d743ffc71b6613be300cc83ac49c6af838ee115ffe11dbc49eaeceece0d200327960eb76830bbbd27a6936783b5cc424d14fcb7cb4c948cc863713f042cacdd418915b0b46714ac0d5be79c0769f10a34b5404fdfd16387ae0ed656deda9991600ac8fd58ad795b20d13bf2bc367a76f2b461c690fe998df24e302845eabf390621b73b3de778138d580d08f7a48fff0f302ab08de035c4f6d27fc82be080524fc0947037a758fbde3ba0e1cd8866b74d5e1af4d5e3b38851447603212ede29e4d7cc41f4a4119bd222d90c7c186af9d1812b0d4a7f6924ab0e71a64456200aa26c4071712c7930b3ccc5e9a379365f4cb926ab80ee2bcac7b95747cf98aca957493e177a2b450d06e2fb275584aa73a219a3bbaf54e4094a8b042258970881c8201a0c70db9d7022e35d4253ac652f624003e009ba8234368a1450a94cbe5d5d2d9d324aeb95b77d7556bb90552d2e8b4afa5663d748919aa4257210a7edba9af0e51eacffabcf5656a29364874244fdd2877de554c6e084d9b560464019850c4e53761cf6d09d6aba0c35e935a08c06abc139fb63a577353b64fb009459e411facf53dd2dc9f447c20324c9651e3c7d7f1a8c5a61924e4bf7eea5b62645fa1de70aed628514cb6a76099d63d20be90be03a14e6eca43a063df70ff1a13d9facafa375cfdc8af3c4d170c4015bf108ca324ceb14311348191fb5f5c55a8d26f4e2ed5ffd7b7bba64fbc9e7daf3f730a5d8df38d35eb77bd76c95088e8fc47865c9d1267990e118a9350ec2c4c343dc8911b7b27b5c30aa302976b5b826f69b9793f66422726519f83df17485f36946d9a5120845ccecf3b3ede40918dda05a92cb376c0cd5132ba25727c1bbd75771398c06d4ffbaabf5aa433570a0849a79db0c99ffbe9111fe972841391612825699f8f61eb2a173a900dbe900528602f2052c5c75a1101fb2c31cd77c54f1ae9e99523aaf2540b577f31e18e20f63067e47367c7339c3bcb31f77ea9aec20ad38ae7fad9bdc0c1317199a9e5f88230b120ab32b780c6ef031921336fea481a04ccfc7603165f59181d634999ca491ae30c95ea284926d3ce173b9f1737e3c11ca851fe7b333a103dd0edafeeb06a91ddc18721ad3dcf4ea999eb0791110f989a60980d72ba5d2c58c272adb4318e4dde638d98338dee48cf466f6131a2eee763354be3f87424e3d3cd35f85b10d22acc08017cc9c239ad9f3d6bf15398dc35142744676e6c0f0ee6db6a6898058b4692f91538887b09d3aced90795991d05a40cb9deec93aa30d54878ab88ea85d46fef74373b310a4868f11e579789557fa49e3cff72c05ce9a1aa56e88ee81432ac498f8e60d79ec1001bcea5b18d6941a7f450dea451d800a4418cd4e830eaf5b5b98701e5ca92bc997dc115c0878538af11bdcbfd16dbb1e6257d070e47930e75c2379f1b4d6f2fe9d953e9696301b2de1bbfe3eb0ce624bb78e9526fa7a9b4362fa18ffd4a48587c6e53087862cd029229cc529701b0813ee0c795b07ac25e892645acf696f830d68a5d97fedcaf19ed982885b4a769f23c96041cfbe864bc057b26321e3cf2ce08a2289d3750b4f46342996f40afeadb06a1607bc793c9524bb71c557cf087a2198792b5795e43ac80e231491603d3f1376af84fbd4dc013a13b90b0331f160f4add767a200eedff1b4984963f810de74c1cef0250a05705ca4769646b8f95600554018eba3abf7bb3e5c5966360823ab6ba6f0426520203cb82f0eace62f2e9ff4b69ce1e0e436d5c4fb27d20a86c06659a59ba16230d882aa43e0a419e36eb64a9424473533941ad0f14623e408e1497ecf76ccb68c6083115422c5724c0a2e7daf0d3fd4bd856fce49f5f2bd9465b6f8608f1680085d8149cece7ca9360a0b2d0f40e8464fc629b58edb5ee5c9c89c2acbef734937e5d4ab6f6db0a5714a6e3a05ff5907a2486768a8b1df551ee069b077d27884e09d2d07bc4a4331d94c574a561d99cd89d42f84537f37112c34d2e30b26e0892332192c9bbc481e4e860e59e610b69ec2c4646f5f9d037756d433c2e2d0c2b2d318abf9b614122631bd7eb22dbf44bee73b8484e8de05b2c7073cdcbfa8b0f12ff189b45395e2e23fdbd099fc1f4ad3357b6007551ed7e7893c82277f6e2b8a3d2b35cd086fdbe2ae0d50783f1e1337b92b2265793b0da9e77e895cb91c12c9795e58b2c9d8539cd019e305692a8fa34ba7dfc81f3f68e3f2574e464afe914d8418e0073e68529be85efc9209bd978ed4924e9c268ea0ea64556d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x3a, 0x82, 0x2, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0xc272e8522602931, 0x7800, 0x10000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0xb0c7e2183b86426f, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x1, 0x20, 0x829, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'sit0\x00', 0x0, 0x2f, 0x6, 0x1, 0x180c87ff, 0x4, @mcast1, @private0, 0x10, 0x40, 0x7fff, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001900)={'ip6tnl0\x00', &(0x7f0000001880)={'sit0\x00', 0x0, 0x4, 0x8a, 0x1, 0x7f, 0x31, @dev={0xfe, 0x80, '\x00', 0x20}, @local, 0x7, 0x1, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a80)={'ip6_vti0\x00', &(0x7f0000001a00)={'sit0\x00', 0x0, 0x2f, 0x6, 0x5, 0x3, 0x1, @mcast2, @mcast1, 0x80, 0x10, 0x3, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001b00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000001c80)={'sit0\x00', &(0x7f0000001c00)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x7f, 0x2, 0x40, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0x1, 0x5}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r10}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r12 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r12, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', r8, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:52:51 executing program 5: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x622c}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9bc, 0xb}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) r1 = socket(0x22, 0x6, 0x1f) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3f, 0x5f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008c0}, 0x80) r4 = syz_open_dev$vcsu(&(0x7f0000000540), 0x63a, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r5, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4258, 0x68}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) 15:52:51 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5, 0x63, 0x0, 0x6, 0x4}, 0x7) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x118, &(0x7f0000000740)=0x1, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'sit0\x00', r0, 0x2b, 0x8, 0x0, 0x8, 0xb, @mcast1, @empty, 0x700, 0x8000, 0x1f, 0x2}}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0x7ff) getsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000840), &(0x7f0000000880)=0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f00000008c0)=0x1, 0x0, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:52:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x6d}, @void, @val={0xc, 0x99, {0x80000000, 0x6f}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x67}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x23}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x10004}, 0x40081) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r8, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:52:51 executing program 7: r0 = syz_io_uring_complete(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x87}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4020000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x50}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0xc090) r4 = socket(0x1, 0x5, 0x81) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3a}, @void, @val={0xc, 0x99, {0x3f, 0x5c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x220e20d2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r5, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7b}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8004800) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xd0, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xb2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_IE={0x8e, 0x2a, [@fast_bss_trans={0x37, 0x82, {0x1f, 0x2, "03f108da15efd239f088b842f75f802a", "c34d681b5543728078de84d8e92a78cc45b9c6ae80a73e30f42ad97f2f092dd0", "033ba3b2b1d07e8cd8546a370daec8637e45a797ca39ffa9863b5e06e9abdc17", [{0x3, 0x22, "de1278e690e1f1b5dfac06a9c67824a693ad66a93ff2330d21b6e5964010229d1abf"}, {0x2, 0xa, "b47eacf1cf884f26f339"}]}}, @chsw_timing={0x68, 0x4, {0x1, 0x7fff}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6}]}, 0xd0}}, 0x48802) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f00000017c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001780)={&(0x7f0000000740)={0x1020, r3, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}]}, 0x1020}, 0x1, 0x0, 0x0, 0x1}, 0x40050) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:52:51 executing program 0: sched_getattr(0xffffffffffffffff, &(0x7f0000000000)={0x38}, 0x38, 0x0) prctl$PR_GET_KEEPCAPS(0x7) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x900, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x60}}}}, [@NL80211_ATTR_KEY_SEQ={0xd, 0xa, "6d3739b0f4d42d490c"}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x1) prctl$PR_GET_KEEPCAPS(0x7) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_io_uring_complete(0x0) 15:52:51 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x90, 0xac, "12761e2fcf66dcf0b8d09f187af93ea79812d034fc34d53bab7a2af11214bd2185b92ce463f584e1ff3fb7d977153728e36f6d2a132e9c1d4ab10c4406726e94abd87dc8be918b1b98bd37d2e80c0106f734f3f1d1059c808c18969ee42679a19919dec06ca5533c6aae18963a3796dd1e3495e5bbff67617434020e01d2c586de1a225a05b79486ac607351"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4090) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r0, 0x210, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4c2, 0x50}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x4054}, 0x44000) r4 = socket(0x1e, 0x6, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r4) r5 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x0, 0x2000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x54}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r5) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, r6, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x2c}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x4844}, 0x4008005) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:52:51 executing program 0: sched_getattr(0xffffffffffffffff, &(0x7f0000000000)={0x38}, 0x38, 0x0) prctl$PR_GET_KEEPCAPS(0x7) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x900, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x60}}}}, [@NL80211_ATTR_KEY_SEQ={0xd, 0xa, "6d3739b0f4d42d490c"}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x1) prctl$PR_GET_KEEPCAPS(0x7) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_io_uring_complete(0x0) 15:52:51 executing program 4: tkill(0x0, 0xf) sched_rr_get_interval(0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x5, 0x80000001, 0x4, 0xf09b, 0x7fff, 0x6, 0x3, 0x2}, &(0x7f0000000080)={0x3, 0x6459, 0xffffffff, 0x1000, 0x6, 0x2, 0x96c, 0xe756}, &(0x7f00000000c0)={0x6, 0xbd, 0x6, 0x1df, 0x9, 0xba, 0xfe8, 0x401}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x100]}, 0x8}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000001c0)) r0 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}}, 0x0) syz_io_uring_complete(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000002b40), 0x200, 0x800) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:52:51 executing program 0: sched_getattr(0xffffffffffffffff, &(0x7f0000000000)={0x38}, 0x38, 0x0) prctl$PR_GET_KEEPCAPS(0x7) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r0, 0x900, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x60}}}}, [@NL80211_ATTR_KEY_SEQ={0xd, 0xa, "6d3739b0f4d42d490c"}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_io_uring_complete(0x0) 15:52:51 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x3a, 0x82, 0x2, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0xc272e8522602931, 0x7800, 0x10000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0xb0c7e2183b86426f, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x1, 0x20, 0x829, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'sit0\x00', 0x0, 0x2f, 0x6, 0x1, 0x180c87ff, 0x4, @mcast1, @private0, 0x10, 0x40, 0x7fff, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001900)={'ip6tnl0\x00', &(0x7f0000001880)={'sit0\x00', 0x0, 0x4, 0x8a, 0x1, 0x7f, 0x31, @dev={0xfe, 0x80, '\x00', 0x20}, @local, 0x7, 0x1, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a80)={'ip6_vti0\x00', &(0x7f0000001a00)={'sit0\x00', 0x0, 0x2f, 0x6, 0x5, 0x3, 0x1, @mcast2, @mcast1, 0x80, 0x10, 0x3, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001b00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r10}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r11 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r11, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', r8, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:52:51 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x90, 0xac, "12761e2fcf66dcf0b8d09f187af93ea79812d034fc34d53bab7a2af11214bd2185b92ce463f584e1ff3fb7d977153728e36f6d2a132e9c1d4ab10c4406726e94abd87dc8be918b1b98bd37d2e80c0106f734f3f1d1059c808c18969ee42679a19919dec06ca5533c6aae18963a3796dd1e3495e5bbff67617434020e01d2c586de1a225a05b79486ac607351"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4090) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r0, 0x210, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4c2, 0x50}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x4054}, 0x44000) r4 = socket(0x1e, 0x6, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r4) r5 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x0, 0x2000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x54}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r5) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x80, r6, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x2c}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x4844}, 0x4008005) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:52:52 executing program 0: sched_getattr(0xffffffffffffffff, &(0x7f0000000000)={0x38}, 0x38, 0x0) prctl$PR_GET_KEEPCAPS(0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_io_uring_complete(0x0) 15:52:52 executing program 7: r0 = syz_io_uring_complete(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x87}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4020000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x50}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0xc090) r4 = socket(0x1, 0x5, 0x81) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3a}, @void, @val={0xc, 0x99, {0x3f, 0x5c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x220e20d2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r5, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7b}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8004800) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xd0, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xb2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_IE={0x8e, 0x2a, [@fast_bss_trans={0x37, 0x82, {0x1f, 0x2, "03f108da15efd239f088b842f75f802a", "c34d681b5543728078de84d8e92a78cc45b9c6ae80a73e30f42ad97f2f092dd0", "033ba3b2b1d07e8cd8546a370daec8637e45a797ca39ffa9863b5e06e9abdc17", [{0x3, 0x22, "de1278e690e1f1b5dfac06a9c67824a693ad66a93ff2330d21b6e5964010229d1abf"}, {0x2, 0xa, "b47eacf1cf884f26f339"}]}}, @chsw_timing={0x68, 0x4, {0x1, 0x7fff}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6}]}, 0xd0}}, 0x48802) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:52:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x6d}, @void, @val={0xc, 0x99, {0x80000000, 0x6f}}}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x67}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x23}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x10004}, 0x40081) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r8, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:52:52 executing program 5: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x622c}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9bc, 0xb}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) r1 = socket(0x22, 0x6, 0x1f) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3f, 0x5f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008c0}, 0x80) r4 = syz_open_dev$vcsu(&(0x7f0000000540), 0x63a, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r5, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4258, 0x68}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) [ 190.702920] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 190.704403] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 190.706687] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 190.708298] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 190.709957] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 190.711313] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 190.712860] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 190.714253] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 191.923693] Bluetooth: hci0: command 0x0c1a tx timeout [ 192.755760] Bluetooth: hci7: command 0x0c1a tx timeout [ 192.755904] Bluetooth: hci6: command 0x0c1a tx timeout [ 192.756291] Bluetooth: hci4: command 0x0c1a tx timeout [ 192.757505] Bluetooth: hci5: command 0x0c1a tx timeout [ 192.757842] Bluetooth: hci3: command 0x0c1a tx timeout [ 192.758918] Bluetooth: hci2: command 0x0c1a tx timeout [ 192.759317] Bluetooth: hci1: command 0x0c1a tx timeout 15:53:00 executing program 4: tkill(0x0, 0xf) sched_rr_get_interval(0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x5, 0x80000001, 0x4, 0xf09b, 0x7fff, 0x6, 0x3, 0x2}, &(0x7f0000000080)={0x3, 0x6459, 0xffffffff, 0x1000, 0x6, 0x2, 0x96c, 0xe756}, &(0x7f00000000c0)={0x6, 0xbd, 0x6, 0x1df, 0x9, 0xba, 0xfe8, 0x401}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x100]}, 0x8}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000001c0)) r0 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x28}}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000002b40), 0x200, 0x800) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:53:00 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x3a, 0x82, 0x2, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0xc272e8522602931, 0x7800, 0x10000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0xb0c7e2183b86426f, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x1, 0x20, 0x829, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'sit0\x00', 0x0, 0x2f, 0x6, 0x1, 0x180c87ff, 0x4, @mcast1, @private0, 0x10, 0x40, 0x7fff, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001900)={'ip6tnl0\x00', &(0x7f0000001880)={'sit0\x00', 0x0, 0x4, 0x8a, 0x1, 0x7f, 0x31, @dev={0xfe, 0x80, '\x00', 0x20}, @local, 0x7, 0x1, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a80)={'ip6_vti0\x00', &(0x7f0000001a00)={'sit0\x00', 0x0, 0x2f, 0x6, 0x5, 0x3, 0x1, @mcast2, @mcast1, 0x80, 0x10, 0x3, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001b00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r10}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r11 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r11, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', r8, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:53:00 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5, 0x63, 0x0, 0x6, 0x4}, 0x7) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x118, &(0x7f0000000740)=0x1, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'sit0\x00', r0, 0x2b, 0x8, 0x0, 0x8, 0xb, @mcast1, @empty, 0x700, 0x8000, 0x1f, 0x2}}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0x7ff) getsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000840), &(0x7f0000000880)=0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f00000008c0)=0x1, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:53:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r7, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:53:00 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x90, 0xac, "12761e2fcf66dcf0b8d09f187af93ea79812d034fc34d53bab7a2af11214bd2185b92ce463f584e1ff3fb7d977153728e36f6d2a132e9c1d4ab10c4406726e94abd87dc8be918b1b98bd37d2e80c0106f734f3f1d1059c808c18969ee42679a19919dec06ca5533c6aae18963a3796dd1e3495e5bbff67617434020e01d2c586de1a225a05b79486ac607351"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4090) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r0, 0x210, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4c2, 0x50}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x4054}, 0x44000) r4 = socket(0x1e, 0x6, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r4) r5 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x0, 0x2000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x54}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r5) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r2) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r6, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r6, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:53:00 executing program 5: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x622c}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9bc, 0xb}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) r1 = socket(0x22, 0x6, 0x1f) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3f, 0x5f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008c0}, 0x80) syz_open_dev$vcsu(&(0x7f0000000540), 0x63a, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) 15:53:00 executing program 7: r0 = syz_io_uring_complete(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x87}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4020000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x50}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0xc090) r4 = socket(0x1, 0x5, 0x81) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3a}, @void, @val={0xc, 0x99, {0x3f, 0x5c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x220e20d2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r5, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7b}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8004800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:53:00 executing program 0: sched_getattr(0xffffffffffffffff, &(0x7f0000000000)={0x38}, 0x38, 0x0) prctl$PR_GET_KEEPCAPS(0x7) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_io_uring_complete(0x0) 15:53:01 executing program 0: sched_getattr(0xffffffffffffffff, &(0x7f0000000000)={0x38}, 0x38, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_io_uring_complete(0x0) 15:53:01 executing program 4: tkill(0x0, 0xf) sched_rr_get_interval(0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x5, 0x80000001, 0x4, 0xf09b, 0x7fff, 0x6, 0x3, 0x2}, &(0x7f0000000080)={0x3, 0x6459, 0xffffffff, 0x1000, 0x6, 0x2, 0x96c, 0xe756}, &(0x7f00000000c0)={0x6, 0xbd, 0x6, 0x1df, 0x9, 0xba, 0xfe8, 0x401}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x100]}, 0x8}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000001c0)) syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r0 = syz_open_dev$vcsu(&(0x7f0000002b40), 0x200, 0x800) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:53:01 executing program 5: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x622c}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9bc, 0xb}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) r1 = socket(0x22, 0x6, 0x1f) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3f, 0x5f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008c0}, 0x80) syz_open_dev$vcsu(&(0x7f0000000540), 0x63a, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) [ 200.019628] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 200.020826] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 200.021712] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.022481] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.023272] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 200.024117] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 200.024896] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 200.026473] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 201.267689] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.035762] Bluetooth: hci7: command 0x0c1a tx timeout [ 202.036837] Bluetooth: hci6: command 0x0c1a tx timeout [ 202.037841] Bluetooth: hci4: command 0x0c1a tx timeout [ 202.038839] Bluetooth: hci5: command 0x0c1a tx timeout [ 202.038889] Bluetooth: hci3: command 0x0c1a tx timeout [ 202.039795] Bluetooth: hci2: command 0x0c1a tx timeout [ 202.040570] Bluetooth: hci1: command 0x0c1a tx timeout 15:53:10 executing program 7: r0 = syz_io_uring_complete(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x87}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4020000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x50}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0xc090) r4 = socket(0x1, 0x5, 0x81) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3a}, @void, @val={0xc, 0x99, {0x3f, 0x5c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:53:10 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_io_uring_complete(0x0) 15:53:10 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5, 0x63, 0x0, 0x6, 0x4}, 0x7) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x118, &(0x7f0000000740)=0x1, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'sit0\x00', r0, 0x2b, 0x8, 0x0, 0x8, 0xb, @mcast1, @empty, 0x700, 0x8000, 0x1f, 0x2}}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0x7ff) getsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000840), &(0x7f0000000880)=0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f00000008c0)=0x1, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:53:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r7, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:53:10 executing program 4: tkill(0x0, 0xf) sched_rr_get_interval(0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x5, 0x80000001, 0x4, 0xf09b, 0x7fff, 0x6, 0x3, 0x2}, &(0x7f0000000080)={0x3, 0x6459, 0xffffffff, 0x1000, 0x6, 0x2, 0x96c, 0xe756}, &(0x7f00000000c0)={0x6, 0xbd, 0x6, 0x1df, 0x9, 0xba, 0xfe8, 0x401}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x100]}, 0x8}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000001c0)) syz_io_uring_complete(0x0) r0 = syz_open_dev$vcsu(&(0x7f0000002b40), 0x200, 0x800) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:53:10 executing program 5: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x622c}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9bc, 0xb}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) r1 = socket(0x22, 0x6, 0x1f) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3f, 0x5f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008c0}, 0x80) syz_open_dev$vcsu(&(0x7f0000000540), 0x63a, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) 15:53:10 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x90, 0xac, "12761e2fcf66dcf0b8d09f187af93ea79812d034fc34d53bab7a2af11214bd2185b92ce463f584e1ff3fb7d977153728e36f6d2a132e9c1d4ab10c4406726e94abd87dc8be918b1b98bd37d2e80c0106f734f3f1d1059c808c18969ee42679a19919dec06ca5533c6aae18963a3796dd1e3495e5bbff67617434020e01d2c586de1a225a05b79486ac607351"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4090) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r0, 0x210, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4c2, 0x50}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x4054}, 0x44000) r4 = socket(0x1e, 0x6, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r4) r5 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x0, 0x2000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x54}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r2) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r6, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r6, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:53:10 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x3a, 0x82, 0x2, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0xc272e8522602931, 0x7800, 0x10000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0xb0c7e2183b86426f, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x1, 0x20, 0x829, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'sit0\x00', 0x0, 0x2f, 0x6, 0x1, 0x180c87ff, 0x4, @mcast1, @private0, 0x10, 0x40, 0x7fff, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001900)={'ip6tnl0\x00', &(0x7f0000001880)={'sit0\x00', 0x0, 0x4, 0x8a, 0x1, 0x7f, 0x31, @dev={0xfe, 0x80, '\x00', 0x20}, @local, 0x7, 0x1, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a80)={'ip6_vti0\x00', &(0x7f0000001a00)={'sit0\x00', 0x0, 0x2f, 0x6, 0x5, 0x3, 0x1, @mcast2, @mcast1, 0x80, 0x10, 0x3, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001b00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r10}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r11 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r11, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', r8, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:53:10 executing program 4: tkill(0x0, 0xf) sched_rr_get_interval(0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x5, 0x80000001, 0x4, 0xf09b, 0x7fff, 0x6, 0x3, 0x2}, &(0x7f0000000080)={0x3, 0x6459, 0xffffffff, 0x1000, 0x6, 0x2, 0x96c, 0xe756}, &(0x7f00000000c0)={0x6, 0xbd, 0x6, 0x1df, 0x9, 0xba, 0xfe8, 0x401}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x100]}, 0x8}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000001c0)) r0 = syz_open_dev$vcsu(&(0x7f0000002b40), 0x200, 0x800) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:53:10 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_io_uring_complete(0x0) 15:53:10 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x3a, 0x82, 0x2, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0xc272e8522602931, 0x7800, 0x10000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0xb0c7e2183b86426f, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x1, 0x20, 0x829, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'sit0\x00', 0x0, 0x2f, 0x6, 0x1, 0x180c87ff, 0x4, @mcast1, @private0, 0x10, 0x40, 0x7fff, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001900)={'ip6tnl0\x00', &(0x7f0000001880)={'sit0\x00', 0x0, 0x4, 0x8a, 0x1, 0x7f, 0x31, @dev={0xfe, 0x80, '\x00', 0x20}, @local, 0x7, 0x1, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a80)={'ip6_vti0\x00', &(0x7f0000001a00)={'sit0\x00', 0x0, 0x2f, 0x6, 0x5, 0x3, 0x1, @mcast2, @mcast1, 0x80, 0x10, 0x3, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001b00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r10 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r10, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', r8, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:53:10 executing program 4: tkill(0x0, 0xf) sched_rr_get_interval(0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x5, 0x80000001, 0x4, 0xf09b, 0x7fff, 0x6, 0x3, 0x2}, &(0x7f0000000080)={0x3, 0x6459, 0xffffffff, 0x1000, 0x6, 0x2, 0x96c, 0xe756}, &(0x7f00000000c0)={0x6, 0xbd, 0x6, 0x1df, 0x9, 0xba, 0xfe8, 0x401}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x100]}, 0x8}) r0 = syz_open_dev$vcsu(&(0x7f0000002b40), 0x200, 0x800) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:53:11 executing program 5: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x622c}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9bc, 0xb}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) r1 = socket(0x22, 0x6, 0x1f) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3f, 0x5f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008c0}, 0x80) r4 = syz_open_dev$vcsu(&(0x7f0000000540), 0x63a, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4258, 0x68}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) 15:53:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r7, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:53:11 executing program 7: r0 = syz_io_uring_complete(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x87}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4020000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x50}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0xc090) r4 = socket(0x1, 0x5, 0x81) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3a}, @void, @val={0xc, 0x99, {0x3f, 0x5c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:53:11 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_io_uring_complete(0x0) 15:53:11 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x90, 0xac, "12761e2fcf66dcf0b8d09f187af93ea79812d034fc34d53bab7a2af11214bd2185b92ce463f584e1ff3fb7d977153728e36f6d2a132e9c1d4ab10c4406726e94abd87dc8be918b1b98bd37d2e80c0106f734f3f1d1059c808c18969ee42679a19919dec06ca5533c6aae18963a3796dd1e3495e5bbff67617434020e01d2c586de1a225a05b79486ac607351"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4090) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r0, 0x210, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4c2, 0x50}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x4054}, 0x44000) r4 = socket(0x1e, 0x6, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r4) r5 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x0, 0x2000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x54}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r2) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r6, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r6, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:53:11 executing program 4: tkill(0x0, 0xf) sched_rr_get_interval(0x0, &(0x7f0000000000)) r0 = syz_open_dev$vcsu(&(0x7f0000002b40), 0x200, 0x800) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 209.614377] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 209.619493] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 209.625537] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 209.629937] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 209.634916] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 209.638318] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 209.647471] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 209.650976] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 210.803724] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.635727] Bluetooth: hci5: command 0x0c1a tx timeout [ 211.635758] Bluetooth: hci3: command 0x0c1a tx timeout [ 211.636844] Bluetooth: hci2: command 0x0c1a tx timeout [ 211.637308] Bluetooth: hci1: command 0x0c1a tx timeout [ 211.699740] Bluetooth: hci7: command 0x0c1a tx timeout [ 211.700307] Bluetooth: hci6: command 0x0c1a tx timeout [ 211.700358] Bluetooth: hci4: command 0x0c1a tx timeout 15:53:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r7, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:53:19 executing program 4: tkill(0x0, 0xf) r0 = syz_open_dev$vcsu(&(0x7f0000002b40), 0x200, 0x800) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:53:19 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_complete(0x0) 15:53:19 executing program 5: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x622c}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9bc, 0xb}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) r1 = socket(0x22, 0x6, 0x1f) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3f, 0x5f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008c0}, 0x80) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4258, 0x68}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) 15:53:19 executing program 7: r0 = syz_io_uring_complete(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x87}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4020000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x50}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0xc090) r4 = socket(0x1, 0x5, 0x81) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3a}, @void, @val={0xc, 0x99, {0x3f, 0x5c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:53:19 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5, 0x63, 0x0, 0x6, 0x4}, 0x7) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x118, &(0x7f0000000740)=0x1, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'sit0\x00', r0, 0x2b, 0x8, 0x0, 0x8, 0xb, @mcast1, @empty, 0x700, 0x8000, 0x1f, 0x2}}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0x7ff) getsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000840), &(0x7f0000000880)=0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f00000008c0)=0x1, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:53:19 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x90, 0xac, "12761e2fcf66dcf0b8d09f187af93ea79812d034fc34d53bab7a2af11214bd2185b92ce463f584e1ff3fb7d977153728e36f6d2a132e9c1d4ab10c4406726e94abd87dc8be918b1b98bd37d2e80c0106f734f3f1d1059c808c18969ee42679a19919dec06ca5533c6aae18963a3796dd1e3495e5bbff67617434020e01d2c586de1a225a05b79486ac607351"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4090) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r0, 0x210, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4c2, 0x50}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x4054}, 0x44000) r4 = socket(0x1e, 0x6, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r4) r5 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x0, 0x2000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x54}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r2) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r6, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r6, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:53:19 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x3a, 0x82, 0x2, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0xc272e8522602931, 0x7800, 0x10000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0xb0c7e2183b86426f, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x1, 0x20, 0x829, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'sit0\x00', 0x0, 0x2f, 0x6, 0x1, 0x180c87ff, 0x4, @mcast1, @private0, 0x10, 0x40, 0x7fff, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001900)={'ip6tnl0\x00', &(0x7f0000001880)={'sit0\x00', 0x0, 0x4, 0x8a, 0x1, 0x7f, 0x31, @dev={0xfe, 0x80, '\x00', 0x20}, @local, 0x7, 0x1, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a80)={'ip6_vti0\x00', &(0x7f0000001a00)={'sit0\x00', 0x0, 0x2f, 0x6, 0x5, 0x3, 0x1, @mcast2, @mcast1, 0x80, 0x10, 0x3, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001b00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r10 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r10, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', r8, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:53:19 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_complete(0x0) 15:53:20 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_complete(0x0) 15:53:20 executing program 5: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x622c}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9bc, 0xb}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) r1 = socket(0x22, 0x6, 0x1f) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3f, 0x5f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008c0}, 0x80) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4258, 0x68}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) 15:53:20 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000002b40), 0x200, 0x800) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:53:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r7, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:53:20 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x3a, 0x82, 0x2, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0xc272e8522602931, 0x7800, 0x10000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0xb0c7e2183b86426f, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x1, 0x20, 0x829, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'sit0\x00', 0x0, 0x2f, 0x6, 0x1, 0x180c87ff, 0x4, @mcast1, @private0, 0x10, 0x40, 0x7fff, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001900)={'ip6tnl0\x00', &(0x7f0000001880)={'sit0\x00', 0x0, 0x4, 0x8a, 0x1, 0x7f, 0x31, @dev={0xfe, 0x80, '\x00', 0x20}, @local, 0x7, 0x1, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a80)={'ip6_vti0\x00', &(0x7f0000001a00)={'sit0\x00', 0x0, 0x2f, 0x6, 0x5, 0x3, 0x1, @mcast2, @mcast1, 0x80, 0x10, 0x3, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001b00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r10 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r10, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', r8, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:53:20 executing program 7: r0 = syz_io_uring_complete(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x87}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4020000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x50}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0xc090) socket(0x1, 0x5, 0x81) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:53:20 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x90, 0xac, "12761e2fcf66dcf0b8d09f187af93ea79812d034fc34d53bab7a2af11214bd2185b92ce463f584e1ff3fb7d977153728e36f6d2a132e9c1d4ab10c4406726e94abd87dc8be918b1b98bd37d2e80c0106f734f3f1d1059c808c18969ee42679a19919dec06ca5533c6aae18963a3796dd1e3495e5bbff67617434020e01d2c586de1a225a05b79486ac607351"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4090) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r0, 0x210, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4c2, 0x50}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x4054}, 0x44000) r4 = socket(0x1e, 0x6, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r4) r5 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x0, 0x2000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r5) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r2) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r6, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r6, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:53:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r6, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) [ 218.990425] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 218.993047] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 218.994668] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 218.996573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.998185] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 218.999437] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 219.002517] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 219.004779] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 220.211872] Bluetooth: hci0: command 0x0c1a tx timeout [ 221.043799] Bluetooth: hci7: command 0x0c1a tx timeout [ 221.043870] Bluetooth: hci6: command 0x0c1a tx timeout [ 221.044720] Bluetooth: hci4: command 0x0c1a tx timeout [ 221.045766] Bluetooth: hci5: command 0x0c1a tx timeout [ 221.046526] Bluetooth: hci3: command 0x0c1a tx timeout [ 221.047510] Bluetooth: hci2: command 0x0c1a tx timeout [ 221.048287] Bluetooth: hci1: command 0x0c1a tx timeout 15:53:30 executing program 4: r0 = syz_open_dev$vcsu(0x0, 0x200, 0x800) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:53:30 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5, 0x63, 0x0, 0x6, 0x4}, 0x7) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x118, &(0x7f0000000740)=0x1, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'sit0\x00', r0, 0x2b, 0x8, 0x0, 0x8, 0xb, @mcast1, @empty, 0x700, 0x8000, 0x1f, 0x2}}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0x7ff) getsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000840), &(0x7f0000000880)=0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f00000008c0)=0x1, 0x0, 0x4) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:53:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r6, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:53:30 executing program 7: r0 = syz_io_uring_complete(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x87}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4020000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x50}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0xc090) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:53:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r7, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:53:30 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x90, 0xac, "12761e2fcf66dcf0b8d09f187af93ea79812d034fc34d53bab7a2af11214bd2185b92ce463f584e1ff3fb7d977153728e36f6d2a132e9c1d4ab10c4406726e94abd87dc8be918b1b98bd37d2e80c0106f734f3f1d1059c808c18969ee42679a19919dec06ca5533c6aae18963a3796dd1e3495e5bbff67617434020e01d2c586de1a225a05b79486ac607351"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4090) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r0, 0x210, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4c2, 0x50}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x4054}, 0x44000) r4 = socket(0x1e, 0x6, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r2) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r5, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r5, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:53:30 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x3a, 0x82, 0x2, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0xc272e8522602931, 0x7800, 0x10000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0xb0c7e2183b86426f, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x1, 0x20, 0x829, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'sit0\x00', 0x0, 0x2f, 0x6, 0x1, 0x180c87ff, 0x4, @mcast1, @private0, 0x10, 0x40, 0x7fff, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001900)={'ip6tnl0\x00', &(0x7f0000001880)={'sit0\x00', 0x0, 0x4, 0x8a, 0x1, 0x7f, 0x31, @dev={0xfe, 0x80, '\x00', 0x20}, @local, 0x7, 0x1, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a80)={'ip6_vti0\x00', &(0x7f0000001a00)={'sit0\x00', 0x0, 0x2f, 0x6, 0x5, 0x3, 0x1, @mcast2, @mcast1, 0x80, 0x10, 0x3, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r9}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r10 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r10, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', r8, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:53:30 executing program 5: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x622c}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9bc, 0xb}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) r1 = socket(0x22, 0x6, 0x1f) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000040}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3f, 0x5f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008c0}, 0x80) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4258, 0x68}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) 15:53:30 executing program 4: r0 = syz_open_dev$vcsu(0x0, 0x200, 0x800) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:53:30 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x3a, 0x82, 0x2, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0xc272e8522602931, 0x7800, 0x10000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0xb0c7e2183b86426f, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x1, 0x20, 0x829, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'sit0\x00', 0x0, 0x2f, 0x6, 0x1, 0x180c87ff, 0x4, @mcast1, @private0, 0x10, 0x40, 0x7fff, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001900)={'ip6tnl0\x00', &(0x7f0000001880)={'sit0\x00', 0x0, 0x4, 0x8a, 0x1, 0x7f, 0x31, @dev={0xfe, 0x80, '\x00', 0x20}, @local, 0x7, 0x1, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001a80)={'ip6_vti0\x00', &(0x7f0000001a00)={'sit0\x00', 0x0, 0x2f, 0x6, 0x5, 0x3, 0x1, @mcast2, @mcast1, 0x80, 0x10, 0x3, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r9 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r9, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:53:30 executing program 4: r0 = syz_open_dev$vcsu(0x0, 0x200, 0x800) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:53:30 executing program 5: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x622c}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9bc, 0xb}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) r1 = socket(0x22, 0x6, 0x1f) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4258, 0x68}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) 15:53:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r6, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:53:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r7, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:53:30 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x90, 0xac, "12761e2fcf66dcf0b8d09f187af93ea79812d034fc34d53bab7a2af11214bd2185b92ce463f584e1ff3fb7d977153728e36f6d2a132e9c1d4ab10c4406726e94abd87dc8be918b1b98bd37d2e80c0106f734f3f1d1059c808c18969ee42679a19919dec06ca5533c6aae18963a3796dd1e3495e5bbff67617434020e01d2c586de1a225a05b79486ac607351"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4090) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r0, 0x210, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4c2, 0x50}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x4054}, 0x44000) socket(0x1e, 0x6, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r2) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r4, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:53:30 executing program 7: r0 = syz_io_uring_complete(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x87}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4020000) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) [ 229.137528] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 229.144718] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 229.147300] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 229.157451] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 229.168959] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 229.180104] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 229.183587] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 229.194959] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 230.387801] Bluetooth: hci0: command 0x0c1a tx timeout [ 231.155798] Bluetooth: hci2: command 0x0c1a tx timeout [ 231.156885] Bluetooth: hci1: command 0x0c1a tx timeout [ 231.219770] Bluetooth: hci7: command 0x0c1a tx timeout [ 231.220829] Bluetooth: hci6: command 0x0c1a tx timeout [ 231.221854] Bluetooth: hci4: command 0x0c1a tx timeout [ 231.221895] Bluetooth: hci5: command 0x0c1a tx timeout [ 231.222849] Bluetooth: hci3: command 0x0c1a tx timeout 15:53:40 executing program 7: r0 = syz_io_uring_complete(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x87}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4020000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:53:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r6, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:53:40 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000002b40), 0x0, 0x800) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:53:40 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x90, 0xac, "12761e2fcf66dcf0b8d09f187af93ea79812d034fc34d53bab7a2af11214bd2185b92ce463f584e1ff3fb7d977153728e36f6d2a132e9c1d4ab10c4406726e94abd87dc8be918b1b98bd37d2e80c0106f734f3f1d1059c808c18969ee42679a19919dec06ca5533c6aae18963a3796dd1e3495e5bbff67617434020e01d2c586de1a225a05b79486ac607351"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4090) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r0, 0x210, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4c2, 0x50}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x4054}, 0x44000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r2) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r4, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r4, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:53:40 executing program 5: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x622c}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9bc, 0xb}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) r1 = socket(0x22, 0x6, 0x1f) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4258, 0x68}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) 15:53:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:53:40 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5, 0x63, 0x0, 0x6, 0x4}, 0x7) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x118, &(0x7f0000000740)=0x1, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'sit0\x00', r0, 0x2b, 0x8, 0x0, 0x8, 0xb, @mcast1, @empty, 0x700, 0x8000, 0x1f, 0x2}}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0x7ff) getsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000840), &(0x7f0000000880)=0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f00000008c0)=0x1, 0x0, 0x4) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:53:40 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "6151afabe440b49174972fd6385f44c413bb552cf75e843bea60aa726612458ac0e2e67151a4b3c35193038748d3fa26e8ad986ff5249b06badd16bfb23fe5eb6179e81fc4c81f29c790a226b7b16e660db579047989c13b77989af5f99bf3dd652e6fdad8e20ea711c42961eb613be2126a7c2ae578d89d928afee53b33f224ff1382b0203fe0857caf6f3f686963cc41c23c65d5fd81d46f411cfdc99404a72668e2b8339d63f7698576f6fe8ca7f12c16885d246a7f9964a8e0f775246aa63bedfb5e5c063fc870678fc814e43e486b1f1ac0355bbcb9f90a1a7c4bded64611023ced0fe079cad87359733a9c2b77817381fa6f335271cc67f699229765302a9eb5c9031b09ef23dcc090a21c18c6488e707d41ad3faaad402de2dcb0468cadefc9884f21b1be58bbb652884357d3b39450b51cd305a0bef94d7cf5faaa2ea78b9e2f33750c3ed6944b83f3be0943c3fbcaf933891d9f6dbdf4490c2c8eeee4e610246d7c230e25b1736865fec415ebad1ccd6f86c6bff65643599434105eac07d3734665d703879a6ac125568200c02e53e708f9784ae6e4e6024e6e1ac3f7a1bba0cd0ffb6c2188ab28d4b4cac820d1a3a091218b8a43b052aeace3425a29f4fe75989b23a2cd68803760889efcbaf6687c1878fdd0e091cd36ada1bee832e445a8c7bf194f34ee5074978a4fc24a215ca2d03fc7d3b307360821012c46d49d14b4829eee0bc3ced2e2b32f98ed04917ebd2b5c2d2124a7582e68dd8fd57da9447acef18203035285a7078fe5dff5b57cc3816d9ded87453f69db274529cae7868662dff4450a9182443293906a03640440ef499ebe367823ac7e0e556a9473a6ae3ae81a91379d932ca850f0a1aa3a120783f1b80e6fd023d97aaa8984f7d21f6d7123491753f9dd8c2d8f5af80c4577c998e16c92e19e591d000b42e47aa84d17af272240da890a9eb3bcd4287870a635298e4a7305bc7da4c3c8912ff790ab7c839fc89d4f6d123d0fe8c554c4a61fe3ed7038b52dcc4ebb6a53ad9e0f3da688bcf9fe797f4fd1369f106e00aa6f491ba54894889151ec1a099c32752a2dd99040343630592afe3594c9f2585d5dfb391f023852b3a3c647071ed5d4daffefdac46a249d88b3706c13a626faf4986a79d68aaa7b0d1eced086ddd5f6e131a38ba3fb387561e1b97a05069fc69c4ce2f6b9b551c0ac002ba5dc98c3ba08b92e085cf938c29bf608c5c997d59ef904f1e85c7992c8d2647f70ddefdc9e9073c2622934b011c92622ac1dd27e3c1848873b4077c30710a076d286d7bd0183aa74aa3ea51f42262c224cdb0a4e06df44a281a1ccc78ffdced217cb41abb90e899514b14d9d70247825e2a388de7ddd135e1b02495ebff492c7a6721f47725c981a6549c574c050988d7312ed536dcc6324af813543e55d665120a4b9d365a1660f162aa0b5b6103d79c0ced4645246cdce6ab1cbbe79e0acd8ab18d7241c4d5bd293d443a506bb33da26cfa61b90ca437c0852c13a042f55e91d0dd18e58de3a413139efdade695e92665bd59f20183ed374ca6acfec7d97eadb7b324d7464b0016595a8c0148f7ee3ded47485c84b87775a64891a5c69f32571a3586c53483d7fc0d9de7c951a570c86ffc2cfd2530d3744d0c6213857088ffdd463fb49249fcee91b34bcce9893e4a9651741c16688eb64f3dd6456bb4ad9a05b3175e27a86f3dc69bc5efe2c91fb7b67bce255f3219118066a5b0d404852a08d2d0cd64ffc80cf3f4b60b1b9d11ff436cc1754b7d361b346b558555eaab58e7f54d1ce161a7bd4d7a4751d6e680405dc79e14cd6489b38a57513ba738ee23d895f045be3f24a520a7a680de7f2e9e894dd2ce8c36c3fc0030cf9d2d309ef45797c442ace71cb3801513bba54018c892e7cd139c82756e67ace776b3055789c028d4aca4df1ce13a8019a29167bcd7ea56e8babd15fea2067cefa73b755c5eafdaa485fc83b613cc48827a310d9603818c95261ecb2b7554a845a8ab3e9289264d5b9b004f799da40083b821a10829504732997950796889e6cf568cfc438c04129d14a7a9590475d2b9f004cc40fa23731cf6fe76b6e5056fc843163ac02d86b445a73c9b684ba4db67c243362f56f720b69251ed638c0460252715230a4a5cbf3ce9bfe2b7d9f5866f87f8280f79199cd5bb113b99b1da19f3373eb417fd0468833f0d56c5c4d8542e53832987186c567dde26e410e4c9c68395ca0ae995c07db508880ded2888577cc4a6a607d0133cdea108ef3204d6d44369820a521314302e1739fd73e80872f8488a8a916477167e091981b5c7fdf677a7bd5ef27e556c98bd806a3f2bf640cd4b5a7927c9591183b13a34443b4fdff8d57f8faf76e09a722309c2de4f0452463c4e8464f836704f5d1efd86b63450ff5b91a04ecfec751e78d48966c2b305e8084e7b2a30d35c6f11cd1f2eff5d1788809f37136b3faa48418ac672b482ed3919f896f32029b3a17ae8101fb54816eefd42dc360c9d26e548ec5ecc054f503d0eb0437d90abc0db43523ea8f707cbdbcb3c95b2153c20fb0d537069505d9009d6005e6bde78c29de2611668562b7e14f26818438ffb3d23d2cdfef114d98fc1af32ebfa2cf281f2f075be191183ddecd2bf420effc56059b012a09c7f8f2e362a40025aafeaa244eb8bc3a10e3f69beaf7178be7a0a676c2c384e26e66f94874626ebfd8bbc382b14e454663f5cb5ddfa7be96d8f512d54309846f7c450538bae159848325eadbe0ea58f2135ebebc90931a61e35210b2ce42c3bdec1364e0390c35e783916c53fcb9ed32b7d3f92ad238d9ac9da0b77e26b958332eb37ef91b98e354a94e7c4d0671ca64bd76cc895d4588b10296d754eb1ba51adc3b5dbdf109e4af58643dfc05ea955b755ec1ea6ca0af3df81b338e572fcab431ed9c1cbd0878d9fe5984927e9840a556eb015e31010c08bf282be79da8dd9521d2193405838876f4ab0b1df85c0318b0584fea6e6d23d3656ec3f7bb2e33d981ea7f355d4fabecb189c9b1b6aebac626699725574ee67ff6f187dd15242418889526dcd31c908911ad0884583104922f0acf33a51510071bdf97130b312d17cee96d98a74a083c980bc3fce6d1fda5bcea8a3bd1da877ab5c628cb4f80c297739b8e4345393d30a854b9f044665e1f3dcb7bdf5c0efc5ccdd95af82c035cdff21be0cee079cb55412eb9f391c9fd9be72cb30b501492dac2b3f59f7ea29eaf54029b304d468cd8356a9acc26daf3117e214b52760b0dd0ae20b6258a4e800287a5bd426f5352524a2de225ab2921b9a903662525b07aae8cf9fd09aa2bff6ced85be92feba713f0a5a6242951ea9d9eaa24008083246e83fc7195facbd48c36ca55b20d672a4fdde227c782cde18c34afea73ce927abcd3f74997986edb550cb006935865d34a367821b6504268ba97b4076750254a1c888c47f46b1382016dfc707ea26d4d4b3d743ffc71b6613be300cc83ac49c6af838ee115ffe11dbc49eaeceece0d200327960eb76830bbbd27a6936783b5cc424d14fcb7cb4c948cc863713f042cacdd418915b0b46714ac0d5be79c0769f10a34b5404fdfd16387ae0ed656deda9991600ac8fd58ad795b20d13bf2bc367a76f2b461c690fe998df24e302845eabf390621b73b3de778138d580d08f7a48fff0f302ab08de035c4f6d27fc82be080524fc0947037a758fbde3ba0e1cd8866b74d5e1af4d5e3b38851447603212ede29e4d7cc41f4a4119bd222d90c7c186af9d1812b0d4a7f6924ab0e71a64456200aa26c4071712c7930b3ccc5e9a379365f4cb926ab80ee2bcac7b95747cf98aca957493e177a2b450d06e2fb275584aa73a219a3bbaf54e4094a8b042258970881c8201a0c70db9d7022e35d4253ac652f624003e009ba8234368a1450a94cbe5d5d2d9d324aeb95b77d7556bb90552d2e8b4afa5663d748919aa4257210a7edba9af0e51eacffabcf5656a29364874244fdd2877de554c6e084d9b560464019850c4e53761cf6d09d6aba0c35e935a08c06abc139fb63a577353b64fb009459e411facf53dd2dc9f447c20324c9651e3c7d7f1a8c5a61924e4bf7eea5b62645fa1de70aed628514cb6a76099d63d20be90be03a14e6eca43a063df70ff1a13d9facafa375cfdc8af3c4d170c4015bf108ca324ceb14311348191fb5f5c55a8d26f4e2ed5ffd7b7bba64fbc9e7daf3f730a5d8df38d35eb77bd76c95088e8fc47865c9d1267990e118a9350ec2c4c343dc8911b7b27b5c30aa302976b5b826f69b9793f66422726519f83df17485f36946d9a5120845ccecf3b3ede40918dda05a92cb376c0cd5132ba25727c1bbd75771398c06d4ffbaabf5aa433570a0849a79db0c99ffbe9111fe972841391612825699f8f61eb2a173a900dbe900528602f2052c5c75a1101fb2c31cd77c54f1ae9e99523aaf2540b577f31e18e20f63067e47367c7339c3bcb31f77ea9aec20ad38ae7fad9bdc0c1317199a9e5f88230b120ab32b780c6ef031921336fea481a04ccfc7603165f59181d634999ca491ae30c95ea284926d3ce173b9f1737e3c11ca851fe7b333a103dd0edafeeb06a91ddc18721ad3dcf4ea999eb0791110f989a60980d72ba5d2c58c272adb4318e4dde638d98338dee48cf466f6131a2eee763354be3f87424e3d3cd35f85b10d22acc08017cc9c239ad9f3d6bf15398dc35142744676e6c0f0ee6db6a6898058b4692f91538887b09d3aced90795991d05a40cb9deec93aa30d54878ab88ea85d46fef74373b310a4868f11e579789557fa49e3cff72c05ce9a1aa56e88ee81432ac498f8e60d79ec1001bcea5b18d6941a7f450dea451d800a4418cd4e830eaf5b5b98701e5ca92bc997dc115c0878538af11bdcbfd16dbb1e6257d070e47930e75c2379f1b4d6f2fe9d953e9696301b2de1bbfe3eb0ce624bb78e9526fa7a9b4362fa18ffd4a48587c6e53087862cd029229cc529701b0813ee0c795b07ac25e892645acf696f830d68a5d97fedcaf19ed982885b4a769f23c96041cfbe864bc057b26321e3cf2ce08a2289d3750b4f46342996f40afeadb06a1607bc793c9524bb71c557cf087a2198792b5795e43ac80e231491603d3f1376af84fbd4dc013a13b90b0331f160f4add767a200eedff1b4984963f810de74c1cef0250a05705ca4769646b8f95600554018eba3abf7bb3e5c5966360823ab6ba6f0426520203cb82f0eace62f2e9ff4b69ce1e0e436d5c4fb27d20a86c06659a59ba16230d882aa43e0a419e36eb64a9424473533941ad0f14623e408e1497ecf76ccb68c6083115422c5724c0a2e7daf0d3fd4bd856fce49f5f2bd9465b6f8608f1680085d8149cece7ca9360a0b2d0f40e8464fc629b58edb5ee5c9c89c2acbef734937e5d4ab6f6db0a5714a6e3a05ff5907a2486768a8b1df551ee069b077d27884e09d2d07bc4a4331d94c574a561d99cd89d42f84537f37112c34d2e30b26e0892332192c9bbc481e4e860e59e610b69ec2c4646f5f9d037756d433c2e2d0c2b2d318abf9b614122631bd7eb22dbf44bee73b8484e8de05b2c7073cdcbfa8b0f12ff189b45395e2e23fdbd099fc1f4ad3357b6007551ed7e7893c82277f6e2b8a3d2b35cd086fdbe2ae0d50783f1e1337b92b2265793b0da9e77e895cb91c12c9795e58b2c9d8539cd019e305692a8fa34ba7dfc81f3f68e3f2574e464afe914d8418e0073e68529be85efc9209bd978ed4924e9c268ea0ea64556d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x3a, 0x82, 0x2, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0xc272e8522602931, 0x7800, 0x10000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0xb0c7e2183b86426f, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x1, 0x20, 0x829, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'sit0\x00', 0x0, 0x2f, 0x6, 0x1, 0x180c87ff, 0x4, @mcast1, @private0, 0x10, 0x40, 0x7fff, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001900)={'ip6tnl0\x00', &(0x7f0000001880)={'sit0\x00', 0x0, 0x4, 0x8a, 0x1, 0x7f, 0x31, @dev={0xfe, 0x80, '\x00', 0x20}, @local, 0x7, 0x1, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r7}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r8 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:53:40 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000002b40), 0x0, 0x800) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:53:40 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x90, 0xac, "12761e2fcf66dcf0b8d09f187af93ea79812d034fc34d53bab7a2af11214bd2185b92ce463f584e1ff3fb7d977153728e36f6d2a132e9c1d4ab10c4406726e94abd87dc8be918b1b98bd37d2e80c0106f734f3f1d1059c808c18969ee42679a19919dec06ca5533c6aae18963a3796dd1e3495e5bbff67617434020e01d2c586de1a225a05b79486ac607351"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4090) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r2) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r3, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:53:40 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x3a, 0x82, 0x2, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0xc272e8522602931, 0x7800, 0x10000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0xb0c7e2183b86426f, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x1, 0x20, 0x829, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'sit0\x00', 0x0, 0x2f, 0x6, 0x1, 0x180c87ff, 0x4, @mcast1, @private0, 0x10, 0x40, 0x7fff, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001900)={'ip6tnl0\x00', &(0x7f0000001880)={'sit0\x00', 0x0, 0x4, 0x8a, 0x1, 0x7f, 0x31, @dev={0xfe, 0x80, '\x00', 0x20}, @local, 0x7, 0x1, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r6}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r7 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r7, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:53:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r6, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:53:40 executing program 5: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x622c}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9bc, 0xb}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) r1 = socket(0x22, 0x6, 0x1f) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4258, 0x68}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) 15:53:40 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000002b40), 0x0, 0x800) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:53:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:53:40 executing program 7: syz_io_uring_complete(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:53:40 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000002b40), 0x200, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:53:40 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x90, 0xac, "12761e2fcf66dcf0b8d09f187af93ea79812d034fc34d53bab7a2af11214bd2185b92ce463f584e1ff3fb7d977153728e36f6d2a132e9c1d4ab10c4406726e94abd87dc8be918b1b98bd37d2e80c0106f734f3f1d1059c808c18969ee42679a19919dec06ca5533c6aae18963a3796dd1e3495e5bbff67617434020e01d2c586de1a225a05b79486ac607351"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4090) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r2) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r3, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r3, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) [ 239.115239] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 239.116568] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 239.118339] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.120867] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 239.122504] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 239.127169] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 239.129922] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 239.137029] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 240.307670] Bluetooth: hci0: command 0x0c1a tx timeout [ 241.139764] Bluetooth: hci7: command 0x0c1a tx timeout [ 241.140518] Bluetooth: hci6: command 0x0c1a tx timeout [ 241.141259] Bluetooth: hci4: command 0x0c1a tx timeout [ 241.141954] Bluetooth: hci5: command 0x0c1a tx timeout [ 241.142660] Bluetooth: hci3: command 0x0c1a tx timeout [ 241.142883] Bluetooth: hci2: command 0x0c1a tx timeout [ 241.143336] Bluetooth: hci1: command 0x0c1a tx timeout 15:53:49 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x90, 0xac, "12761e2fcf66dcf0b8d09f187af93ea79812d034fc34d53bab7a2af11214bd2185b92ce463f584e1ff3fb7d977153728e36f6d2a132e9c1d4ab10c4406726e94abd87dc8be918b1b98bd37d2e80c0106f734f3f1d1059c808c18969ee42679a19919dec06ca5533c6aae18963a3796dd1e3495e5bbff67617434020e01d2c586de1a225a05b79486ac607351"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:53:49 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x3a, 0x82, 0x2, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0xc272e8522602931, 0x7800, 0x10000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0xb0c7e2183b86426f, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x1, 0x20, 0x829, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'sit0\x00', 0x0, 0x2f, 0x6, 0x1, 0x180c87ff, 0x4, @mcast1, @private0, 0x10, 0x40, 0x7fff, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001900)={'ip6tnl0\x00', &(0x7f0000001880)={'sit0\x00', 0x0, 0x4, 0x8a, 0x1, 0x7f, 0x31, @dev={0xfe, 0x80, '\x00', 0x20}, @local, 0x7, 0x1, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r6}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r7 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r7, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:53:49 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5, 0x63, 0x0, 0x6, 0x4}, 0x7) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x118, &(0x7f0000000740)=0x1, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'sit0\x00', r0, 0x2b, 0x8, 0x0, 0x8, 0xb, @mcast1, @empty, 0x700, 0x8000, 0x1f, 0x2}}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r5, 0x330f, 0x7ff) getsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000840), &(0x7f0000000880)=0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f00000008c0)=0x1, 0x0, 0x4) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:53:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:53:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r4, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:53:49 executing program 5: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x622c}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9bc, 0xb}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4258, 0x68}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) 15:53:49 executing program 4: syz_open_dev$vcsu(&(0x7f0000002b40), 0x200, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:53:49 executing program 7: syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:53:49 executing program 7: syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:53:49 executing program 4: syz_open_dev$vcsu(&(0x7f0000002b40), 0x200, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 248.495931] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 248.497299] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 248.498475] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.499570] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 248.500826] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 248.501953] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 248.503144] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 248.503998] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 249.716707] Bluetooth: hci0: command 0x0c1a tx timeout [ 250.547718] Bluetooth: hci7: command 0x0c1a tx timeout [ 250.547742] Bluetooth: hci6: command 0x0c1a tx timeout [ 250.547780] Bluetooth: hci4: command 0x0c1a tx timeout [ 250.548854] Bluetooth: hci5: command 0x0c1a tx timeout [ 250.549268] Bluetooth: hci3: command 0x0c1a tx timeout [ 250.550478] Bluetooth: hci2: command 0x0c1a tx timeout [ 250.550649] Bluetooth: hci1: command 0x0c1a tx timeout 15:53:59 executing program 7: syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:53:59 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x90, 0xac, "12761e2fcf66dcf0b8d09f187af93ea79812d034fc34d53bab7a2af11214bd2185b92ce463f584e1ff3fb7d977153728e36f6d2a132e9c1d4ab10c4406726e94abd87dc8be918b1b98bd37d2e80c0106f734f3f1d1059c808c18969ee42679a19919dec06ca5533c6aae18963a3796dd1e3495e5bbff67617434020e01d2c586de1a225a05b79486ac607351"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:53:59 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x3a, 0x82, 0x2, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0xc272e8522602931, 0x7800, 0x10000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0xb0c7e2183b86426f, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x1, 0x20, 0x829, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'sit0\x00', 0x0, 0x2f, 0x6, 0x1, 0x180c87ff, 0x4, @mcast1, @private0, 0x10, 0x40, 0x7fff, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001900)={'ip6tnl0\x00', &(0x7f0000001880)={'sit0\x00', 0x0, 0x4, 0x8a, 0x1, 0x7f, 0x31, @dev={0xfe, 0x80, '\x00', 0x20}, @local, 0x7, 0x1, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r6}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r7 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r7, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:53:59 executing program 5: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x622c}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9bc, 0xb}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4258, 0x68}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) 15:53:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r4, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:53:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:53:59 executing program 4: syz_open_dev$vcsu(&(0x7f0000002b40), 0x200, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:53:59 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4, 0x63, 0x0, 0x6, 0x4}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x118, &(0x7f0000000740)=0x1, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'sit0\x00', r0, 0x2b, 0x8, 0x0, 0x8, 0xb, @mcast1, @empty, 0x700, 0x8000, 0x1f, 0x2}}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x7ff) getsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000840), &(0x7f0000000880)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:53:59 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:53:59 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000002b40), 0x200, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x0) 15:53:59 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:53:59 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, r0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x90, 0xac, "12761e2fcf66dcf0b8d09f187af93ea79812d034fc34d53bab7a2af11214bd2185b92ce463f584e1ff3fb7d977153728e36f6d2a132e9c1d4ab10c4406726e94abd87dc8be918b1b98bd37d2e80c0106f734f3f1d1059c808c18969ee42679a19919dec06ca5533c6aae18963a3796dd1e3495e5bbff67617434020e01d2c586de1a225a05b79486ac607351"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:53:59 executing program 5: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x622c}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4258, 0x68}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) 15:53:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:53:59 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:53:59 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x3a, 0x82, 0x2, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0xc272e8522602931, 0x7800, 0x10000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0xb0c7e2183b86426f, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x1, 0x20, 0x829, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001840)={'syztnl0\x00', &(0x7f00000017c0)={'sit0\x00', 0x0, 0x2f, 0x6, 0x1, 0x180c87ff, 0x4, @mcast1, @private0, 0x10, 0x40, 0x7fff, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r6}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r7 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r7, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) [ 258.533116] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 258.533844] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.534435] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 258.535570] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.536480] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 258.537260] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 258.538775] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 258.539368] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 259.763712] Bluetooth: hci0: command 0x0c1a tx timeout [ 260.595774] Bluetooth: hci7: command 0x0c1a tx timeout [ 260.595806] Bluetooth: hci6: command 0x0c1a tx timeout [ 260.596957] Bluetooth: hci4: command 0x0c1a tx timeout [ 260.597379] Bluetooth: hci5: command 0x0c1a tx timeout [ 260.598410] Bluetooth: hci3: command 0x0c1a tx timeout [ 260.598810] Bluetooth: hci2: command 0x0c1a tx timeout [ 260.598834] Bluetooth: hci1: command 0x0c1a tx timeout 15:54:08 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:54:08 executing program 5: sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x622c}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20020000}, 0x40000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4258, 0x68}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) 15:54:08 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4, 0x63, 0x0, 0x6, 0x4}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x118, &(0x7f0000000740)=0x1, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'sit0\x00', r0, 0x2b, 0x8, 0x0, 0x8, 0xb, @mcast1, @empty, 0x700, 0x8000, 0x1f, 0x2}}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x7ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:54:08 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "6151afabe440b49174972fd6385f44c413bb552cf75e843bea60aa726612458ac0e2e67151a4b3c35193038748d3fa26e8ad986ff5249b06badd16bfb23fe5eb6179e81fc4c81f29c790a226b7b16e660db579047989c13b77989af5f99bf3dd652e6fdad8e20ea711c42961eb613be2126a7c2ae578d89d928afee53b33f224ff1382b0203fe0857caf6f3f686963cc41c23c65d5fd81d46f411cfdc99404a72668e2b8339d63f7698576f6fe8ca7f12c16885d246a7f9964a8e0f775246aa63bedfb5e5c063fc870678fc814e43e486b1f1ac0355bbcb9f90a1a7c4bded64611023ced0fe079cad87359733a9c2b77817381fa6f335271cc67f699229765302a9eb5c9031b09ef23dcc090a21c18c6488e707d41ad3faaad402de2dcb0468cadefc9884f21b1be58bbb652884357d3b39450b51cd305a0bef94d7cf5faaa2ea78b9e2f33750c3ed6944b83f3be0943c3fbcaf933891d9f6dbdf4490c2c8eeee4e610246d7c230e25b1736865fec415ebad1ccd6f86c6bff65643599434105eac07d3734665d703879a6ac125568200c02e53e708f9784ae6e4e6024e6e1ac3f7a1bba0cd0ffb6c2188ab28d4b4cac820d1a3a091218b8a43b052aeace3425a29f4fe75989b23a2cd68803760889efcbaf6687c1878fdd0e091cd36ada1bee832e445a8c7bf194f34ee5074978a4fc24a215ca2d03fc7d3b307360821012c46d49d14b4829eee0bc3ced2e2b32f98ed04917ebd2b5c2d2124a7582e68dd8fd57da9447acef18203035285a7078fe5dff5b57cc3816d9ded87453f69db274529cae7868662dff4450a9182443293906a03640440ef499ebe367823ac7e0e556a9473a6ae3ae81a91379d932ca850f0a1aa3a120783f1b80e6fd023d97aaa8984f7d21f6d7123491753f9dd8c2d8f5af80c4577c998e16c92e19e591d000b42e47aa84d17af272240da890a9eb3bcd4287870a635298e4a7305bc7da4c3c8912ff790ab7c839fc89d4f6d123d0fe8c554c4a61fe3ed7038b52dcc4ebb6a53ad9e0f3da688bcf9fe797f4fd1369f106e00aa6f491ba54894889151ec1a099c32752a2dd99040343630592afe3594c9f2585d5dfb391f023852b3a3c647071ed5d4daffefdac46a249d88b3706c13a626faf4986a79d68aaa7b0d1eced086ddd5f6e131a38ba3fb387561e1b97a05069fc69c4ce2f6b9b551c0ac002ba5dc98c3ba08b92e085cf938c29bf608c5c997d59ef904f1e85c7992c8d2647f70ddefdc9e9073c2622934b011c92622ac1dd27e3c1848873b4077c30710a076d286d7bd0183aa74aa3ea51f42262c224cdb0a4e06df44a281a1ccc78ffdced217cb41abb90e899514b14d9d70247825e2a388de7ddd135e1b02495ebff492c7a6721f47725c981a6549c574c050988d7312ed536dcc6324af813543e55d665120a4b9d365a1660f162aa0b5b6103d79c0ced4645246cdce6ab1cbbe79e0acd8ab18d7241c4d5bd293d443a506bb33da26cfa61b90ca437c0852c13a042f55e91d0dd18e58de3a413139efdade695e92665bd59f20183ed374ca6acfec7d97eadb7b324d7464b0016595a8c0148f7ee3ded47485c84b87775a64891a5c69f32571a3586c53483d7fc0d9de7c951a570c86ffc2cfd2530d3744d0c6213857088ffdd463fb49249fcee91b34bcce9893e4a9651741c16688eb64f3dd6456bb4ad9a05b3175e27a86f3dc69bc5efe2c91fb7b67bce255f3219118066a5b0d404852a08d2d0cd64ffc80cf3f4b60b1b9d11ff436cc1754b7d361b346b558555eaab58e7f54d1ce161a7bd4d7a4751d6e680405dc79e14cd6489b38a57513ba738ee23d895f045be3f24a520a7a680de7f2e9e894dd2ce8c36c3fc0030cf9d2d309ef45797c442ace71cb3801513bba54018c892e7cd139c82756e67ace776b3055789c028d4aca4df1ce13a8019a29167bcd7ea56e8babd15fea2067cefa73b755c5eafdaa485fc83b613cc48827a310d9603818c95261ecb2b7554a845a8ab3e9289264d5b9b004f799da40083b821a10829504732997950796889e6cf568cfc438c04129d14a7a9590475d2b9f004cc40fa23731cf6fe76b6e5056fc843163ac02d86b445a73c9b684ba4db67c243362f56f720b69251ed638c0460252715230a4a5cbf3ce9bfe2b7d9f5866f87f8280f79199cd5bb113b99b1da19f3373eb417fd0468833f0d56c5c4d8542e53832987186c567dde26e410e4c9c68395ca0ae995c07db508880ded2888577cc4a6a607d0133cdea108ef3204d6d44369820a521314302e1739fd73e80872f8488a8a916477167e091981b5c7fdf677a7bd5ef27e556c98bd806a3f2bf640cd4b5a7927c9591183b13a34443b4fdff8d57f8faf76e09a722309c2de4f0452463c4e8464f836704f5d1efd86b63450ff5b91a04ecfec751e78d48966c2b305e8084e7b2a30d35c6f11cd1f2eff5d1788809f37136b3faa48418ac672b482ed3919f896f32029b3a17ae8101fb54816eefd42dc360c9d26e548ec5ecc054f503d0eb0437d90abc0db43523ea8f707cbdbcb3c95b2153c20fb0d537069505d9009d6005e6bde78c29de2611668562b7e14f26818438ffb3d23d2cdfef114d98fc1af32ebfa2cf281f2f075be191183ddecd2bf420effc56059b012a09c7f8f2e362a40025aafeaa244eb8bc3a10e3f69beaf7178be7a0a676c2c384e26e66f94874626ebfd8bbc382b14e454663f5cb5ddfa7be96d8f512d54309846f7c450538bae159848325eadbe0ea58f2135ebebc90931a61e35210b2ce42c3bdec1364e0390c35e783916c53fcb9ed32b7d3f92ad238d9ac9da0b77e26b958332eb37ef91b98e354a94e7c4d0671ca64bd76cc895d4588b10296d754eb1ba51adc3b5dbdf109e4af58643dfc05ea955b755ec1ea6ca0af3df81b338e572fcab431ed9c1cbd0878d9fe5984927e9840a556eb015e31010c08bf282be79da8dd9521d2193405838876f4ab0b1df85c0318b0584fea6e6d23d3656ec3f7bb2e33d981ea7f355d4fabecb189c9b1b6aebac626699725574ee67ff6f187dd15242418889526dcd31c908911ad0884583104922f0acf33a51510071bdf97130b312d17cee96d98a74a083c980bc3fce6d1fda5bcea8a3bd1da877ab5c628cb4f80c297739b8e4345393d30a854b9f044665e1f3dcb7bdf5c0efc5ccdd95af82c035cdff21be0cee079cb55412eb9f391c9fd9be72cb30b501492dac2b3f59f7ea29eaf54029b304d468cd8356a9acc26daf3117e214b52760b0dd0ae20b6258a4e800287a5bd426f5352524a2de225ab2921b9a903662525b07aae8cf9fd09aa2bff6ced85be92feba713f0a5a6242951ea9d9eaa24008083246e83fc7195facbd48c36ca55b20d672a4fdde227c782cde18c34afea73ce927abcd3f74997986edb550cb006935865d34a367821b6504268ba97b4076750254a1c888c47f46b1382016dfc707ea26d4d4b3d743ffc71b6613be300cc83ac49c6af838ee115ffe11dbc49eaeceece0d200327960eb76830bbbd27a6936783b5cc424d14fcb7cb4c948cc863713f042cacdd418915b0b46714ac0d5be79c0769f10a34b5404fdfd16387ae0ed656deda9991600ac8fd58ad795b20d13bf2bc367a76f2b461c690fe998df24e302845eabf390621b73b3de778138d580d08f7a48fff0f302ab08de035c4f6d27fc82be080524fc0947037a758fbde3ba0e1cd8866b74d5e1af4d5e3b38851447603212ede29e4d7cc41f4a4119bd222d90c7c186af9d1812b0d4a7f6924ab0e71a64456200aa26c4071712c7930b3ccc5e9a379365f4cb926ab80ee2bcac7b95747cf98aca957493e177a2b450d06e2fb275584aa73a219a3bbaf54e4094a8b042258970881c8201a0c70db9d7022e35d4253ac652f624003e009ba8234368a1450a94cbe5d5d2d9d324aeb95b77d7556bb90552d2e8b4afa5663d748919aa4257210a7edba9af0e51eacffabcf5656a29364874244fdd2877de554c6e084d9b560464019850c4e53761cf6d09d6aba0c35e935a08c06abc139fb63a577353b64fb009459e411facf53dd2dc9f447c20324c9651e3c7d7f1a8c5a61924e4bf7eea5b62645fa1de70aed628514cb6a76099d63d20be90be03a14e6eca43a063df70ff1a13d9facafa375cfdc8af3c4d170c4015bf108ca324ceb14311348191fb5f5c55a8d26f4e2ed5ffd7b7bba64fbc9e7daf3f730a5d8df38d35eb77bd76c95088e8fc47865c9d1267990e118a9350ec2c4c343dc8911b7b27b5c30aa302976b5b826f69b9793f66422726519f83df17485f36946d9a5120845ccecf3b3ede40918dda05a92cb376c0cd5132ba25727c1bbd75771398c06d4ffbaabf5aa433570a0849a79db0c99ffbe9111fe972841391612825699f8f61eb2a173a900dbe900528602f2052c5c75a1101fb2c31cd77c54f1ae9e99523aaf2540b577f31e18e20f63067e47367c7339c3bcb31f77ea9aec20ad38ae7fad9bdc0c1317199a9e5f88230b120ab32b780c6ef031921336fea481a04ccfc7603165f59181d634999ca491ae30c95ea284926d3ce173b9f1737e3c11ca851fe7b333a103dd0edafeeb06a91ddc18721ad3dcf4ea999eb0791110f989a60980d72ba5d2c58c272adb4318e4dde638d98338dee48cf466f6131a2eee763354be3f87424e3d3cd35f85b10d22acc08017cc9c239ad9f3d6bf15398dc35142744676e6c0f0ee6db6a6898058b4692f91538887b09d3aced90795991d05a40cb9deec93aa30d54878ab88ea85d46fef74373b310a4868f11e579789557fa49e3cff72c05ce9a1aa56e88ee81432ac498f8e60d79ec1001bcea5b18d6941a7f450dea451d800a4418cd4e830eaf5b5b98701e5ca92bc997dc115c0878538af11bdcbfd16dbb1e6257d070e47930e75c2379f1b4d6f2fe9d953e9696301b2de1bbfe3eb0ce624bb78e9526fa7a9b4362fa18ffd4a48587c6e53087862cd029229cc529701b0813ee0c795b07ac25e892645acf696f830d68a5d97fedcaf19ed982885b4a769f23c96041cfbe864bc057b26321e3cf2ce08a2289d3750b4f46342996f40afeadb06a1607bc793c9524bb71c557cf087a2198792b5795e43ac80e231491603d3f1376af84fbd4dc013a13b90b0331f160f4add767a200eedff1b4984963f810de74c1cef0250a05705ca4769646b8f95600554018eba3abf7bb3e5c5966360823ab6ba6f0426520203cb82f0eace62f2e9ff4b69ce1e0e436d5c4fb27d20a86c06659a59ba16230d882aa43e0a419e36eb64a9424473533941ad0f14623e408e1497ecf76ccb68c6083115422c5724c0a2e7daf0d3fd4bd856fce49f5f2bd9465b6f8608f1680085d8149cece7ca9360a0b2d0f40e8464fc629b58edb5ee5c9c89c2acbef734937e5d4ab6f6db0a5714a6e3a05ff5907a2486768a8b1df551ee069b077d27884e09d2d07bc4a4331d94c574a561d99cd89d42f84537f37112c34d2e30b26e0892332192c9bbc481e4e860e59e610b69ec2c4646f5f9d037756d433c2e2d0c2b2d318abf9b614122631bd7eb22dbf44bee73b8484e8de05b2c7073cdcbfa8b0f12ff189b45395e2e23fdbd099fc1f4ad3357b6007551ed7e7893c82277f6e2b8a3d2b35cd086fdbe2ae0d50783f1e1337b92b2265793b0da9e77e895cb91c12c9795e58b2c9d8539cd019e305692a8fa34ba7dfc81f3f68e3f2574e464afe914d8418e0073e68529be85efc9209bd978ed4924e9c268ea0ea64556d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x3a, 0x82, 0x2, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0xc272e8522602931, 0x7800, 0x10000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0xb0c7e2183b86426f, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x1, 0x20, 0x829, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r5}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r6 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:54:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:08 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) syz_io_uring_complete(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r1) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:54:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:09 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:54:09 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r1) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:54:09 executing program 5: sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4258, 0x68}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) 15:54:09 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:54:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:09 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "6151afabe440b49174972fd6385f44c413bb552cf75e843bea60aa726612458ac0e2e67151a4b3c35193038748d3fa26e8ad986ff5249b06badd16bfb23fe5eb6179e81fc4c81f29c790a226b7b16e660db579047989c13b77989af5f99bf3dd652e6fdad8e20ea711c42961eb613be2126a7c2ae578d89d928afee53b33f224ff1382b0203fe0857caf6f3f686963cc41c23c65d5fd81d46f411cfdc99404a72668e2b8339d63f7698576f6fe8ca7f12c16885d246a7f9964a8e0f775246aa63bedfb5e5c063fc870678fc814e43e486b1f1ac0355bbcb9f90a1a7c4bded64611023ced0fe079cad87359733a9c2b77817381fa6f335271cc67f699229765302a9eb5c9031b09ef23dcc090a21c18c6488e707d41ad3faaad402de2dcb0468cadefc9884f21b1be58bbb652884357d3b39450b51cd305a0bef94d7cf5faaa2ea78b9e2f33750c3ed6944b83f3be0943c3fbcaf933891d9f6dbdf4490c2c8eeee4e610246d7c230e25b1736865fec415ebad1ccd6f86c6bff65643599434105eac07d3734665d703879a6ac125568200c02e53e708f9784ae6e4e6024e6e1ac3f7a1bba0cd0ffb6c2188ab28d4b4cac820d1a3a091218b8a43b052aeace3425a29f4fe75989b23a2cd68803760889efcbaf6687c1878fdd0e091cd36ada1bee832e445a8c7bf194f34ee5074978a4fc24a215ca2d03fc7d3b307360821012c46d49d14b4829eee0bc3ced2e2b32f98ed04917ebd2b5c2d2124a7582e68dd8fd57da9447acef18203035285a7078fe5dff5b57cc3816d9ded87453f69db274529cae7868662dff4450a9182443293906a03640440ef499ebe367823ac7e0e556a9473a6ae3ae81a91379d932ca850f0a1aa3a120783f1b80e6fd023d97aaa8984f7d21f6d7123491753f9dd8c2d8f5af80c4577c998e16c92e19e591d000b42e47aa84d17af272240da890a9eb3bcd4287870a635298e4a7305bc7da4c3c8912ff790ab7c839fc89d4f6d123d0fe8c554c4a61fe3ed7038b52dcc4ebb6a53ad9e0f3da688bcf9fe797f4fd1369f106e00aa6f491ba54894889151ec1a099c32752a2dd99040343630592afe3594c9f2585d5dfb391f023852b3a3c647071ed5d4daffefdac46a249d88b3706c13a626faf4986a79d68aaa7b0d1eced086ddd5f6e131a38ba3fb387561e1b97a05069fc69c4ce2f6b9b551c0ac002ba5dc98c3ba08b92e085cf938c29bf608c5c997d59ef904f1e85c7992c8d2647f70ddefdc9e9073c2622934b011c92622ac1dd27e3c1848873b4077c30710a076d286d7bd0183aa74aa3ea51f42262c224cdb0a4e06df44a281a1ccc78ffdced217cb41abb90e899514b14d9d70247825e2a388de7ddd135e1b02495ebff492c7a6721f47725c981a6549c574c050988d7312ed536dcc6324af813543e55d665120a4b9d365a1660f162aa0b5b6103d79c0ced4645246cdce6ab1cbbe79e0acd8ab18d7241c4d5bd293d443a506bb33da26cfa61b90ca437c0852c13a042f55e91d0dd18e58de3a413139efdade695e92665bd59f20183ed374ca6acfec7d97eadb7b324d7464b0016595a8c0148f7ee3ded47485c84b87775a64891a5c69f32571a3586c53483d7fc0d9de7c951a570c86ffc2cfd2530d3744d0c6213857088ffdd463fb49249fcee91b34bcce9893e4a9651741c16688eb64f3dd6456bb4ad9a05b3175e27a86f3dc69bc5efe2c91fb7b67bce255f3219118066a5b0d404852a08d2d0cd64ffc80cf3f4b60b1b9d11ff436cc1754b7d361b346b558555eaab58e7f54d1ce161a7bd4d7a4751d6e680405dc79e14cd6489b38a57513ba738ee23d895f045be3f24a520a7a680de7f2e9e894dd2ce8c36c3fc0030cf9d2d309ef45797c442ace71cb3801513bba54018c892e7cd139c82756e67ace776b3055789c028d4aca4df1ce13a8019a29167bcd7ea56e8babd15fea2067cefa73b755c5eafdaa485fc83b613cc48827a310d9603818c95261ecb2b7554a845a8ab3e9289264d5b9b004f799da40083b821a10829504732997950796889e6cf568cfc438c04129d14a7a9590475d2b9f004cc40fa23731cf6fe76b6e5056fc843163ac02d86b445a73c9b684ba4db67c243362f56f720b69251ed638c0460252715230a4a5cbf3ce9bfe2b7d9f5866f87f8280f79199cd5bb113b99b1da19f3373eb417fd0468833f0d56c5c4d8542e53832987186c567dde26e410e4c9c68395ca0ae995c07db508880ded2888577cc4a6a607d0133cdea108ef3204d6d44369820a521314302e1739fd73e80872f8488a8a916477167e091981b5c7fdf677a7bd5ef27e556c98bd806a3f2bf640cd4b5a7927c9591183b13a34443b4fdff8d57f8faf76e09a722309c2de4f0452463c4e8464f836704f5d1efd86b63450ff5b91a04ecfec751e78d48966c2b305e8084e7b2a30d35c6f11cd1f2eff5d1788809f37136b3faa48418ac672b482ed3919f896f32029b3a17ae8101fb54816eefd42dc360c9d26e548ec5ecc054f503d0eb0437d90abc0db43523ea8f707cbdbcb3c95b2153c20fb0d537069505d9009d6005e6bde78c29de2611668562b7e14f26818438ffb3d23d2cdfef114d98fc1af32ebfa2cf281f2f075be191183ddecd2bf420effc56059b012a09c7f8f2e362a40025aafeaa244eb8bc3a10e3f69beaf7178be7a0a676c2c384e26e66f94874626ebfd8bbc382b14e454663f5cb5ddfa7be96d8f512d54309846f7c450538bae159848325eadbe0ea58f2135ebebc90931a61e35210b2ce42c3bdec1364e0390c35e783916c53fcb9ed32b7d3f92ad238d9ac9da0b77e26b958332eb37ef91b98e354a94e7c4d0671ca64bd76cc895d4588b10296d754eb1ba51adc3b5dbdf109e4af58643dfc05ea955b755ec1ea6ca0af3df81b338e572fcab431ed9c1cbd0878d9fe5984927e9840a556eb015e31010c08bf282be79da8dd9521d2193405838876f4ab0b1df85c0318b0584fea6e6d23d3656ec3f7bb2e33d981ea7f355d4fabecb189c9b1b6aebac626699725574ee67ff6f187dd15242418889526dcd31c908911ad0884583104922f0acf33a51510071bdf97130b312d17cee96d98a74a083c980bc3fce6d1fda5bcea8a3bd1da877ab5c628cb4f80c297739b8e4345393d30a854b9f044665e1f3dcb7bdf5c0efc5ccdd95af82c035cdff21be0cee079cb55412eb9f391c9fd9be72cb30b501492dac2b3f59f7ea29eaf54029b304d468cd8356a9acc26daf3117e214b52760b0dd0ae20b6258a4e800287a5bd426f5352524a2de225ab2921b9a903662525b07aae8cf9fd09aa2bff6ced85be92feba713f0a5a6242951ea9d9eaa24008083246e83fc7195facbd48c36ca55b20d672a4fdde227c782cde18c34afea73ce927abcd3f74997986edb550cb006935865d34a367821b6504268ba97b4076750254a1c888c47f46b1382016dfc707ea26d4d4b3d743ffc71b6613be300cc83ac49c6af838ee115ffe11dbc49eaeceece0d200327960eb76830bbbd27a6936783b5cc424d14fcb7cb4c948cc863713f042cacdd418915b0b46714ac0d5be79c0769f10a34b5404fdfd16387ae0ed656deda9991600ac8fd58ad795b20d13bf2bc367a76f2b461c690fe998df24e302845eabf390621b73b3de778138d580d08f7a48fff0f302ab08de035c4f6d27fc82be080524fc0947037a758fbde3ba0e1cd8866b74d5e1af4d5e3b38851447603212ede29e4d7cc41f4a4119bd222d90c7c186af9d1812b0d4a7f6924ab0e71a64456200aa26c4071712c7930b3ccc5e9a379365f4cb926ab80ee2bcac7b95747cf98aca957493e177a2b450d06e2fb275584aa73a219a3bbaf54e4094a8b042258970881c8201a0c70db9d7022e35d4253ac652f624003e009ba8234368a1450a94cbe5d5d2d9d324aeb95b77d7556bb90552d2e8b4afa5663d748919aa4257210a7edba9af0e51eacffabcf5656a29364874244fdd2877de554c6e084d9b560464019850c4e53761cf6d09d6aba0c35e935a08c06abc139fb63a577353b64fb009459e411facf53dd2dc9f447c20324c9651e3c7d7f1a8c5a61924e4bf7eea5b62645fa1de70aed628514cb6a76099d63d20be90be03a14e6eca43a063df70ff1a13d9facafa375cfdc8af3c4d170c4015bf108ca324ceb14311348191fb5f5c55a8d26f4e2ed5ffd7b7bba64fbc9e7daf3f730a5d8df38d35eb77bd76c95088e8fc47865c9d1267990e118a9350ec2c4c343dc8911b7b27b5c30aa302976b5b826f69b9793f66422726519f83df17485f36946d9a5120845ccecf3b3ede40918dda05a92cb376c0cd5132ba25727c1bbd75771398c06d4ffbaabf5aa433570a0849a79db0c99ffbe9111fe972841391612825699f8f61eb2a173a900dbe900528602f2052c5c75a1101fb2c31cd77c54f1ae9e99523aaf2540b577f31e18e20f63067e47367c7339c3bcb31f77ea9aec20ad38ae7fad9bdc0c1317199a9e5f88230b120ab32b780c6ef031921336fea481a04ccfc7603165f59181d634999ca491ae30c95ea284926d3ce173b9f1737e3c11ca851fe7b333a103dd0edafeeb06a91ddc18721ad3dcf4ea999eb0791110f989a60980d72ba5d2c58c272adb4318e4dde638d98338dee48cf466f6131a2eee763354be3f87424e3d3cd35f85b10d22acc08017cc9c239ad9f3d6bf15398dc35142744676e6c0f0ee6db6a6898058b4692f91538887b09d3aced90795991d05a40cb9deec93aa30d54878ab88ea85d46fef74373b310a4868f11e579789557fa49e3cff72c05ce9a1aa56e88ee81432ac498f8e60d79ec1001bcea5b18d6941a7f450dea451d800a4418cd4e830eaf5b5b98701e5ca92bc997dc115c0878538af11bdcbfd16dbb1e6257d070e47930e75c2379f1b4d6f2fe9d953e9696301b2de1bbfe3eb0ce624bb78e9526fa7a9b4362fa18ffd4a48587c6e53087862cd029229cc529701b0813ee0c795b07ac25e892645acf696f830d68a5d97fedcaf19ed982885b4a769f23c96041cfbe864bc057b26321e3cf2ce08a2289d3750b4f46342996f40afeadb06a1607bc793c9524bb71c557cf087a2198792b5795e43ac80e231491603d3f1376af84fbd4dc013a13b90b0331f160f4add767a200eedff1b4984963f810de74c1cef0250a05705ca4769646b8f95600554018eba3abf7bb3e5c5966360823ab6ba6f0426520203cb82f0eace62f2e9ff4b69ce1e0e436d5c4fb27d20a86c06659a59ba16230d882aa43e0a419e36eb64a9424473533941ad0f14623e408e1497ecf76ccb68c6083115422c5724c0a2e7daf0d3fd4bd856fce49f5f2bd9465b6f8608f1680085d8149cece7ca9360a0b2d0f40e8464fc629b58edb5ee5c9c89c2acbef734937e5d4ab6f6db0a5714a6e3a05ff5907a2486768a8b1df551ee069b077d27884e09d2d07bc4a4331d94c574a561d99cd89d42f84537f37112c34d2e30b26e0892332192c9bbc481e4e860e59e610b69ec2c4646f5f9d037756d433c2e2d0c2b2d318abf9b614122631bd7eb22dbf44bee73b8484e8de05b2c7073cdcbfa8b0f12ff189b45395e2e23fdbd099fc1f4ad3357b6007551ed7e7893c82277f6e2b8a3d2b35cd086fdbe2ae0d50783f1e1337b92b2265793b0da9e77e895cb91c12c9795e58b2c9d8539cd019e305692a8fa34ba7dfc81f3f68e3f2574e464afe914d8418e0073e68529be85efc9209bd978ed4924e9c268ea0ea64556d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x3a, 0x82, 0x2, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0xc272e8522602931, 0x7800, 0x10000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0xb0c7e2183b86426f, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x1, 0x20, 0x829, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r5}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r6 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:54:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:09 executing program 5: sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) 15:54:09 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'batadv_slave_0\x00'}) 15:54:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) [ 267.954498] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 267.956540] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 267.957144] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 267.959529] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 267.961849] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 267.962451] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 267.963182] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 267.964807] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 269.171660] Bluetooth: hci0: command 0x0c1a tx timeout [ 270.003738] Bluetooth: hci7: command 0x0c1a tx timeout [ 270.004257] Bluetooth: hci6: command 0x0c1a tx timeout [ 270.004721] Bluetooth: hci4: command 0x0c1a tx timeout [ 270.005169] Bluetooth: hci5: command 0x0c1a tx timeout [ 270.005593] Bluetooth: hci3: command 0x0c1a tx timeout [ 270.006054] Bluetooth: hci2: command 0x0c1a tx timeout [ 270.006476] Bluetooth: hci1: command 0x0c1a tx timeout 15:54:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:19 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4, 0x63, 0x0, 0x6, 0x4}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x118, &(0x7f0000000740)=0x1, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'sit0\x00', r0, 0x2b, 0x8, 0x0, 0x8, 0xb, @mcast1, @empty, 0x700, 0x8000, 0x1f, 0x2}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:54:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:19 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x3a, 0x82, 0x2, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0xc272e8522602931, 0x7800, 0x10000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'ip6gre0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x0, 0x1, 0xb0c7e2183b86426f, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x1, 0x20, 0x829, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r5}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r6 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:54:19 executing program 5: sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) 15:54:19 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 15:54:19 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r1) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:54:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:19 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 15:54:19 executing program 5: sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:54:19 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r1) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:54:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:19 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x3a, 0x82, 0x2, 0x8, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', 0xc272e8522602931, 0x7800, 0x10000, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r4}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r5 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:54:19 executing program 7: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 15:54:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 15:54:19 executing program 5: sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:54:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) [ 278.331526] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 278.333001] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 278.333974] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 278.334960] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 278.335913] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 278.338001] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 278.338933] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 278.340021] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 279.539713] Bluetooth: hci0: command 0x0c1a tx timeout [ 280.371830] Bluetooth: hci7: command 0x0c1a tx timeout [ 280.372963] Bluetooth: hci6: command 0x0c1a tx timeout [ 280.373996] Bluetooth: hci4: command 0x0c1a tx timeout [ 280.374991] Bluetooth: hci5: command 0x0c1a tx timeout [ 280.375026] Bluetooth: hci3: command 0x0c1a tx timeout [ 280.375985] Bluetooth: hci2: command 0x0c1a tx timeout [ 280.376798] Bluetooth: hci1: command 0x0c1a tx timeout 15:54:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:29 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4a, 0x1c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6bd5f6e108"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20004050) syz_io_uring_complete(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r1) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:54:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:29 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r3}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r4 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:54:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 15:54:29 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4, 0x63, 0x0, 0x6, 0x4}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x118, &(0x7f0000000740)=0x1, 0x0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:54:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:29 executing program 5: sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:54:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:29 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r2}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r3 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:54:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:29 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r1, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:54:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) 15:54:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:30 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r2}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r3 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:54:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) [ 288.564370] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.565947] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.568782] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.570034] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.571241] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 288.575976] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 288.581884] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 288.590006] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 289.779683] Bluetooth: hci0: command 0x0c1a tx timeout [ 290.611848] Bluetooth: hci7: command 0x0c1a tx timeout [ 290.612760] Bluetooth: hci6: command 0x0c1a tx timeout [ 290.612851] Bluetooth: hci4: command 0x0c1a tx timeout [ 290.613577] Bluetooth: hci5: command 0x0c1a tx timeout [ 290.614593] Bluetooth: hci3: command 0x0c1a tx timeout [ 290.615344] Bluetooth: hci2: command 0x0c1a tx timeout [ 290.616277] Bluetooth: hci1: command 0x0c1a tx timeout 15:54:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:39 executing program 1: syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r1, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:54:39 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4, 0x63, 0x0, 0x6, 0x4}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x118, &(0x7f0000000740)=0x1, 0x0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:54:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) 15:54:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:39 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x30}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r2}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r3 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:54:39 executing program 1: syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r1, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:54:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:54:39 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r3}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r4 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:54:39 executing program 1: syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r1, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:54:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) 15:54:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) [ 298.118796] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 298.122590] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.152200] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.175997] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 298.184217] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 298.202477] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 298.214073] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 298.217576] Bluetooth: hci7: Opcode 0x0c1a failed: -4 15:54:39 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r3}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r4 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) [ 299.379721] Bluetooth: hci0: command 0x0c1a tx timeout [ 300.147769] Bluetooth: hci1: command 0x0c1a tx timeout [ 300.211914] Bluetooth: hci4: command 0x0c1a tx timeout [ 300.213030] Bluetooth: hci5: command 0x0c1a tx timeout [ 300.214099] Bluetooth: hci3: command 0x0c1a tx timeout [ 300.215167] Bluetooth: hci2: command 0x0c1a tx timeout [ 300.275756] Bluetooth: hci7: command 0x0c1a tx timeout [ 300.277049] Bluetooth: hci6: command 0x0c1a tx timeout 15:54:49 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r1, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:54:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:49 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa7ef7063ae73212a}, 0xc, &(0x7f0000001400)={&(0x7f0000000080)={0x1358, r0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf2c1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a209823ae868b57cdea8d83780c7822b8dc73bdef92a9cfb2c418337f76aa9ef8ef409"}}, @TIPC_NLA_NODE_ID={0x2a, 0x3, "f77cfedd705e505a439975650df862635f80506b0a2546c1d70664b193dd69d2e482e680ac5c"}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "d87fa18ac57cfda5adab278cc599a1b09294dee00c8a7949d9f92ac8ed13ba1eaab12d1ece95c9fef51ccb95b20678e747e9dc0e32232a523a1cd055a716dc458e29d36dceab8261ecfba8ba796eb1d63381a2f096c37fe8a3cfd96d6d330bca5dd799501114c5558044f564a7e575dc807ed85bab68039a4de939dace6f0528210e48ed5d95ade3b14f447e303348ae22caf569f61b805f2bea08e0c2401b4f0d"}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x115c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "72bcb761b50a50afd4c359a5447a25b2349869088cf9f91e7b3cc9ec84b2899f01d1f634f235adc3203f6ad389f6b59d95bfd5bd79a2c01529b1f7"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "6151afabe440b49174972fd6385f44c413bb552cf75e843bea60aa726612458ac0e2e67151a4b3c35193038748d3fa26e8ad986ff5249b06badd16bfb23fe5eb6179e81fc4c81f29c790a226b7b16e660db579047989c13b77989af5f99bf3dd652e6fdad8e20ea711c42961eb613be2126a7c2ae578d89d928afee53b33f224ff1382b0203fe0857caf6f3f686963cc41c23c65d5fd81d46f411cfdc99404a72668e2b8339d63f7698576f6fe8ca7f12c16885d246a7f9964a8e0f775246aa63bedfb5e5c063fc870678fc814e43e486b1f1ac0355bbcb9f90a1a7c4bded64611023ced0fe079cad87359733a9c2b77817381fa6f335271cc67f699229765302a9eb5c9031b09ef23dcc090a21c18c6488e707d41ad3faaad402de2dcb0468cadefc9884f21b1be58bbb652884357d3b39450b51cd305a0bef94d7cf5faaa2ea78b9e2f33750c3ed6944b83f3be0943c3fbcaf933891d9f6dbdf4490c2c8eeee4e610246d7c230e25b1736865fec415ebad1ccd6f86c6bff65643599434105eac07d3734665d703879a6ac125568200c02e53e708f9784ae6e4e6024e6e1ac3f7a1bba0cd0ffb6c2188ab28d4b4cac820d1a3a091218b8a43b052aeace3425a29f4fe75989b23a2cd68803760889efcbaf6687c1878fdd0e091cd36ada1bee832e445a8c7bf194f34ee5074978a4fc24a215ca2d03fc7d3b307360821012c46d49d14b4829eee0bc3ced2e2b32f98ed04917ebd2b5c2d2124a7582e68dd8fd57da9447acef18203035285a7078fe5dff5b57cc3816d9ded87453f69db274529cae7868662dff4450a9182443293906a03640440ef499ebe367823ac7e0e556a9473a6ae3ae81a91379d932ca850f0a1aa3a120783f1b80e6fd023d97aaa8984f7d21f6d7123491753f9dd8c2d8f5af80c4577c998e16c92e19e591d000b42e47aa84d17af272240da890a9eb3bcd4287870a635298e4a7305bc7da4c3c8912ff790ab7c839fc89d4f6d123d0fe8c554c4a61fe3ed7038b52dcc4ebb6a53ad9e0f3da688bcf9fe797f4fd1369f106e00aa6f491ba54894889151ec1a099c32752a2dd99040343630592afe3594c9f2585d5dfb391f023852b3a3c647071ed5d4daffefdac46a249d88b3706c13a626faf4986a79d68aaa7b0d1eced086ddd5f6e131a38ba3fb387561e1b97a05069fc69c4ce2f6b9b551c0ac002ba5dc98c3ba08b92e085cf938c29bf608c5c997d59ef904f1e85c7992c8d2647f70ddefdc9e9073c2622934b011c92622ac1dd27e3c1848873b4077c30710a076d286d7bd0183aa74aa3ea51f42262c224cdb0a4e06df44a281a1ccc78ffdced217cb41abb90e899514b14d9d70247825e2a388de7ddd135e1b02495ebff492c7a6721f47725c981a6549c574c050988d7312ed536dcc6324af813543e55d665120a4b9d365a1660f162aa0b5b6103d79c0ced4645246cdce6ab1cbbe79e0acd8ab18d7241c4d5bd293d443a506bb33da26cfa61b90ca437c0852c13a042f55e91d0dd18e58de3a413139efdade695e92665bd59f20183ed374ca6acfec7d97eadb7b324d7464b0016595a8c0148f7ee3ded47485c84b87775a64891a5c69f32571a3586c53483d7fc0d9de7c951a570c86ffc2cfd2530d3744d0c6213857088ffdd463fb49249fcee91b34bcce9893e4a9651741c16688eb64f3dd6456bb4ad9a05b3175e27a86f3dc69bc5efe2c91fb7b67bce255f3219118066a5b0d404852a08d2d0cd64ffc80cf3f4b60b1b9d11ff436cc1754b7d361b346b558555eaab58e7f54d1ce161a7bd4d7a4751d6e680405dc79e14cd6489b38a57513ba738ee23d895f045be3f24a520a7a680de7f2e9e894dd2ce8c36c3fc0030cf9d2d309ef45797c442ace71cb3801513bba54018c892e7cd139c82756e67ace776b3055789c028d4aca4df1ce13a8019a29167bcd7ea56e8babd15fea2067cefa73b755c5eafdaa485fc83b613cc48827a310d9603818c95261ecb2b7554a845a8ab3e9289264d5b9b004f799da40083b821a10829504732997950796889e6cf568cfc438c04129d14a7a9590475d2b9f004cc40fa23731cf6fe76b6e5056fc843163ac02d86b445a73c9b684ba4db67c243362f56f720b69251ed638c0460252715230a4a5cbf3ce9bfe2b7d9f5866f87f8280f79199cd5bb113b99b1da19f3373eb417fd0468833f0d56c5c4d8542e53832987186c567dde26e410e4c9c68395ca0ae995c07db508880ded2888577cc4a6a607d0133cdea108ef3204d6d44369820a521314302e1739fd73e80872f8488a8a916477167e091981b5c7fdf677a7bd5ef27e556c98bd806a3f2bf640cd4b5a7927c9591183b13a34443b4fdff8d57f8faf76e09a722309c2de4f0452463c4e8464f836704f5d1efd86b63450ff5b91a04ecfec751e78d48966c2b305e8084e7b2a30d35c6f11cd1f2eff5d1788809f37136b3faa48418ac672b482ed3919f896f32029b3a17ae8101fb54816eefd42dc360c9d26e548ec5ecc054f503d0eb0437d90abc0db43523ea8f707cbdbcb3c95b2153c20fb0d537069505d9009d6005e6bde78c29de2611668562b7e14f26818438ffb3d23d2cdfef114d98fc1af32ebfa2cf281f2f075be191183ddecd2bf420effc56059b012a09c7f8f2e362a40025aafeaa244eb8bc3a10e3f69beaf7178be7a0a676c2c384e26e66f94874626ebfd8bbc382b14e454663f5cb5ddfa7be96d8f512d54309846f7c450538bae159848325eadbe0ea58f2135ebebc90931a61e35210b2ce42c3bdec1364e0390c35e783916c53fcb9ed32b7d3f92ad238d9ac9da0b77e26b958332eb37ef91b98e354a94e7c4d0671ca64bd76cc895d4588b10296d754eb1ba51adc3b5dbdf109e4af58643dfc05ea955b755ec1ea6ca0af3df81b338e572fcab431ed9c1cbd0878d9fe5984927e9840a556eb015e31010c08bf282be79da8dd9521d2193405838876f4ab0b1df85c0318b0584fea6e6d23d3656ec3f7bb2e33d981ea7f355d4fabecb189c9b1b6aebac626699725574ee67ff6f187dd15242418889526dcd31c908911ad0884583104922f0acf33a51510071bdf97130b312d17cee96d98a74a083c980bc3fce6d1fda5bcea8a3bd1da877ab5c628cb4f80c297739b8e4345393d30a854b9f044665e1f3dcb7bdf5c0efc5ccdd95af82c035cdff21be0cee079cb55412eb9f391c9fd9be72cb30b501492dac2b3f59f7ea29eaf54029b304d468cd8356a9acc26daf3117e214b52760b0dd0ae20b6258a4e800287a5bd426f5352524a2de225ab2921b9a903662525b07aae8cf9fd09aa2bff6ced85be92feba713f0a5a6242951ea9d9eaa24008083246e83fc7195facbd48c36ca55b20d672a4fdde227c782cde18c34afea73ce927abcd3f74997986edb550cb006935865d34a367821b6504268ba97b4076750254a1c888c47f46b1382016dfc707ea26d4d4b3d743ffc71b6613be300cc83ac49c6af838ee115ffe11dbc49eaeceece0d200327960eb76830bbbd27a6936783b5cc424d14fcb7cb4c948cc863713f042cacdd418915b0b46714ac0d5be79c0769f10a34b5404fdfd16387ae0ed656deda9991600ac8fd58ad795b20d13bf2bc367a76f2b461c690fe998df24e302845eabf390621b73b3de778138d580d08f7a48fff0f302ab08de035c4f6d27fc82be080524fc0947037a758fbde3ba0e1cd8866b74d5e1af4d5e3b38851447603212ede29e4d7cc41f4a4119bd222d90c7c186af9d1812b0d4a7f6924ab0e71a64456200aa26c4071712c7930b3ccc5e9a379365f4cb926ab80ee2bcac7b95747cf98aca957493e177a2b450d06e2fb275584aa73a219a3bbaf54e4094a8b042258970881c8201a0c70db9d7022e35d4253ac652f624003e009ba8234368a1450a94cbe5d5d2d9d324aeb95b77d7556bb90552d2e8b4afa5663d748919aa4257210a7edba9af0e51eacffabcf5656a29364874244fdd2877de554c6e084d9b560464019850c4e53761cf6d09d6aba0c35e935a08c06abc139fb63a577353b64fb009459e411facf53dd2dc9f447c20324c9651e3c7d7f1a8c5a61924e4bf7eea5b62645fa1de70aed628514cb6a76099d63d20be90be03a14e6eca43a063df70ff1a13d9facafa375cfdc8af3c4d170c4015bf108ca324ceb14311348191fb5f5c55a8d26f4e2ed5ffd7b7bba64fbc9e7daf3f730a5d8df38d35eb77bd76c95088e8fc47865c9d1267990e118a9350ec2c4c343dc8911b7b27b5c30aa302976b5b826f69b9793f66422726519f83df17485f36946d9a5120845ccecf3b3ede40918dda05a92cb376c0cd5132ba25727c1bbd75771398c06d4ffbaabf5aa433570a0849a79db0c99ffbe9111fe972841391612825699f8f61eb2a173a900dbe900528602f2052c5c75a1101fb2c31cd77c54f1ae9e99523aaf2540b577f31e18e20f63067e47367c7339c3bcb31f77ea9aec20ad38ae7fad9bdc0c1317199a9e5f88230b120ab32b780c6ef031921336fea481a04ccfc7603165f59181d634999ca491ae30c95ea284926d3ce173b9f1737e3c11ca851fe7b333a103dd0edafeeb06a91ddc18721ad3dcf4ea999eb0791110f989a60980d72ba5d2c58c272adb4318e4dde638d98338dee48cf466f6131a2eee763354be3f87424e3d3cd35f85b10d22acc08017cc9c239ad9f3d6bf15398dc35142744676e6c0f0ee6db6a6898058b4692f91538887b09d3aced90795991d05a40cb9deec93aa30d54878ab88ea85d46fef74373b310a4868f11e579789557fa49e3cff72c05ce9a1aa56e88ee81432ac498f8e60d79ec1001bcea5b18d6941a7f450dea451d800a4418cd4e830eaf5b5b98701e5ca92bc997dc115c0878538af11bdcbfd16dbb1e6257d070e47930e75c2379f1b4d6f2fe9d953e9696301b2de1bbfe3eb0ce624bb78e9526fa7a9b4362fa18ffd4a48587c6e53087862cd029229cc529701b0813ee0c795b07ac25e892645acf696f830d68a5d97fedcaf19ed982885b4a769f23c96041cfbe864bc057b26321e3cf2ce08a2289d3750b4f46342996f40afeadb06a1607bc793c9524bb71c557cf087a2198792b5795e43ac80e231491603d3f1376af84fbd4dc013a13b90b0331f160f4add767a200eedff1b4984963f810de74c1cef0250a05705ca4769646b8f95600554018eba3abf7bb3e5c5966360823ab6ba6f0426520203cb82f0eace62f2e9ff4b69ce1e0e436d5c4fb27d20a86c06659a59ba16230d882aa43e0a419e36eb64a9424473533941ad0f14623e408e1497ecf76ccb68c6083115422c5724c0a2e7daf0d3fd4bd856fce49f5f2bd9465b6f8608f1680085d8149cece7ca9360a0b2d0f40e8464fc629b58edb5ee5c9c89c2acbef734937e5d4ab6f6db0a5714a6e3a05ff5907a2486768a8b1df551ee069b077d27884e09d2d07bc4a4331d94c574a561d99cd89d42f84537f37112c34d2e30b26e0892332192c9bbc481e4e860e59e610b69ec2c4646f5f9d037756d433c2e2d0c2b2d318abf9b614122631bd7eb22dbf44bee73b8484e8de05b2c7073cdcbfa8b0f12ff189b45395e2e23fdbd099fc1f4ad3357b6007551ed7e7893c82277f6e2b8a3d2b35cd086fdbe2ae0d50783f1e1337b92b2265793b0da9e77e895cb91c12c9795e58b2c9d8539cd019e305692a8fa34ba7dfc81f3f68e3f2574e464afe914d8418e0073e68529be85efc9209bd978ed4924e9c268ea0ea64556d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d}, @TIPC_NLA_NODE_ID={0xae, 0x3, "ae1d7e07bc01fcd02cfad4a3e5aa6281a88683dba5a64fe1ff58a45409c0c9cde5ba5f3aed3a63c4b12445f3716693df23e9a6953a9c78bd8a14ab7ac20b9bb4f706bebe71506e9bb5ce3de9831b17d28181d3a4365e564bb645ce01194dd48faa1f10d4e22894b9e93980530bf6f64940ad0d2de9a0b507173d952bf800adc9e4f51f2153527f1df7f426d4708f1a12594fc8487ee95a8e216f19692ee0ce166b67ebc123ce1e686529"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07ffe8d3c974a4c0bec0349db50c300f5cc07c8489f6ab8fb0c3875f0fd6cc25971191"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}]}, 0x1358}, 0x1, 0x0, 0x0, 0x8080}, 0x1000c855) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r3}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r4 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:54:49 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:54:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x67}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c011}, 0x2000c890) 15:54:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) syz_io_uring_complete(0x0) 15:54:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') 15:54:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:49 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r2}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r3 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:54:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) r5 = syz_io_uring_complete(0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) 15:54:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') 15:54:50 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r1, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:54:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:54:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:50 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r1, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:54:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) [ 308.766317] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 308.767012] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 308.768098] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 308.769438] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 308.770058] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 308.770759] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 308.771349] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 308.772114] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 310.003748] Bluetooth: hci0: command 0x0c1a tx timeout [ 310.771700] Bluetooth: hci6: command 0x0c1a tx timeout [ 310.772747] Bluetooth: hci4: command 0x0c1a tx timeout [ 310.773784] Bluetooth: hci5: command 0x0c1a tx timeout [ 310.774787] Bluetooth: hci3: command 0x0c1a tx timeout [ 310.775767] Bluetooth: hci2: command 0x0c1a tx timeout [ 310.775783] Bluetooth: hci1: command 0x0c1a tx timeout [ 310.836702] Bluetooth: hci7: command 0x0c1a tx timeout 15:54:59 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4, 0x63, 0x0, 0x6, 0x4}, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:54:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0x1, 0x0, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r2}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r3 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:54:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:59 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r1, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:54:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') 15:54:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) syz_io_uring_complete(0x0) 15:54:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 15:54:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000001bc0)={'syztnl0\x00', &(0x7f0000001b40)={'syztnl1\x00', 0x0, 0x2f, 0x3d, 0x1, 0x1, 0x0, @mcast2, @empty, 0x80, 0x700, 0x9, 0x83c}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8, 0x1, r1}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r2 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:54:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:54:59 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(0x0, r0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r1, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:54:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r1, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:54:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:54:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) 15:54:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) [ 318.385183] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 318.386292] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 318.387276] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 318.389453] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 318.390499] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 318.391314] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 318.392134] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 318.392994] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 319.667670] Bluetooth: hci0: command 0x0c1a tx timeout [ 320.435807] Bluetooth: hci7: command 0x0c1a tx timeout [ 320.436705] Bluetooth: hci6: command 0x0c1a tx timeout [ 320.436806] Bluetooth: hci4: command 0x0c1a tx timeout [ 320.437480] Bluetooth: hci5: command 0x0c1a tx timeout [ 320.438922] Bluetooth: hci3: command 0x0c1a tx timeout [ 320.439519] Bluetooth: hci2: command 0x0c1a tx timeout [ 320.440681] Bluetooth: hci1: command 0x0c1a tx timeout 15:55:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:55:10 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4, 0x63, 0x0, 0x6, 0x4}, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:55:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) 15:55:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:55:10 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, r1, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x201b14a5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:55:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:55:10 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:55:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:55:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:55:10 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x24004050) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:55:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:55:10 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:55:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:55:10 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) [ 329.464331] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 329.465971] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.473083] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.476234] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.478356] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 329.480660] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 329.482570] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 329.485575] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 330.675693] Bluetooth: hci0: command 0x0c1a tx timeout [ 331.507746] Bluetooth: hci7: command 0x0c1a tx timeout [ 331.508258] Bluetooth: hci6: command 0x0c1a tx timeout [ 331.508717] Bluetooth: hci4: command 0x0c1a tx timeout [ 331.509143] Bluetooth: hci5: command 0x0c1a tx timeout [ 331.509564] Bluetooth: hci3: command 0x0c1a tx timeout [ 331.509790] Bluetooth: hci2: command 0x0c1a tx timeout [ 331.510042] Bluetooth: hci1: command 0x0c1a tx timeout 15:55:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:55:20 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r0 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:55:20 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4, 0x63, 0x0, 0x6, 0x4}, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:55:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:55:20 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r0, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:55:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:55:20 executing program 2: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:55:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 15:55:20 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r0 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:55:20 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r0, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:55:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:55:20 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x14000004}, 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r0 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:55:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:55:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) 15:55:20 executing program 2: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:55:20 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r0, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:55:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:55:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) [ 339.289399] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 339.292125] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 339.293310] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 339.297120] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 339.298323] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 339.304866] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 339.306082] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 339.308525] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 340.531694] Bluetooth: hci0: command 0x0c1a tx timeout [ 341.299714] Bluetooth: hci5: command 0x0c1a tx timeout [ 341.300398] Bluetooth: hci3: command 0x0c1a tx timeout [ 341.301090] Bluetooth: hci2: command 0x0c1a tx timeout [ 341.301134] Bluetooth: hci1: command 0x0c1a tx timeout [ 341.363713] Bluetooth: hci7: command 0x0c1a tx timeout [ 341.363757] Bluetooth: hci6: command 0x0c1a tx timeout [ 341.364872] Bluetooth: hci4: command 0x0c1a tx timeout 15:55:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:55:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:55:30 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:55:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:55:30 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, 0x0, 0x4800) 15:55:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) 15:55:30 executing program 2: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:55:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:55:30 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, 0x0, 0x4800) [ 349.267434] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 349.269048] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 349.271118] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 349.274135] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 349.275580] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 349.277830] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 349.279265] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 349.280864] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 350.515739] Bluetooth: hci0: command 0x0c1a tx timeout [ 351.285833] Bluetooth: hci7: command 0x0c1a tx timeout [ 351.285867] Bluetooth: hci6: command 0x0c1a tx timeout [ 351.285916] Bluetooth: hci4: command 0x0c1a tx timeout [ 351.286960] Bluetooth: hci5: command 0x0c1a tx timeout [ 351.287405] Bluetooth: hci3: command 0x0c1a tx timeout [ 351.288366] Bluetooth: hci2: command 0x0c1a tx timeout [ 351.288779] Bluetooth: hci1: command 0x0c1a tx timeout 15:55:39 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, 0x0, 0x4800) 15:55:39 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:55:39 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:55:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) 15:55:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:55:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:55:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:55:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:55:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:55:39 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:55:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:55:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:55:39 executing program 7: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:55:39 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) 15:55:39 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:55:39 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:55:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:55:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) [ 358.497140] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 358.499316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 358.500526] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 358.503422] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 358.504581] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 358.506723] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 358.508773] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 358.510412] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 359.731767] Bluetooth: hci0: command 0x0c1a tx timeout [ 360.499725] Bluetooth: hci1: command 0x0c1a tx timeout [ 360.563806] Bluetooth: hci7: command 0x0c1a tx timeout [ 360.564672] Bluetooth: hci6: command 0x0c1a tx timeout [ 360.565483] Bluetooth: hci4: command 0x0c1a tx timeout [ 360.565521] Bluetooth: hci5: command 0x0c1a tx timeout [ 360.566354] Bluetooth: hci3: command 0x0c1a tx timeout [ 360.567481] Bluetooth: hci2: command 0x0c1a tx timeout 15:55:50 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:55:50 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) 15:55:50 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) 15:55:50 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:55:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:55:50 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:55:50 executing program 7: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:55:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:55:50 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:55:50 executing program 7: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:55:50 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:55:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:55:50 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) 15:55:50 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:55:50 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:55:50 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:55:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:55:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) [ 369.441867] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 369.445462] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 369.448793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 369.451318] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 369.453942] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 369.455011] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 369.458277] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 369.459343] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 370.675701] Bluetooth: hci0: command 0x0c1a tx timeout [ 371.507879] Bluetooth: hci2: command 0x0c1a tx timeout [ 371.508913] Bluetooth: hci1: command 0x0c1a tx timeout [ 371.508988] Bluetooth: hci7: command 0x0c1a tx timeout [ 371.510080] Bluetooth: hci6: command 0x0c1a tx timeout [ 371.510883] Bluetooth: hci4: command 0x0c1a tx timeout [ 371.511876] Bluetooth: hci5: command 0x0c1a tx timeout [ 371.512684] Bluetooth: hci3: command 0x0c1a tx timeout 15:56:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:56:01 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:56:01 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:56:01 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) 15:56:01 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:01 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:56:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:01 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:56:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:56:01 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:56:01 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:56:01 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:56:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:56:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:56:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:01 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:01 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:56:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x8804) [ 380.533505] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 380.539581] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.545661] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 380.547377] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 380.553272] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 380.560336] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 380.571243] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 380.572423] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 381.747681] Bluetooth: hci0: command 0x0c1a tx timeout [ 382.579807] Bluetooth: hci7: command 0x0c1a tx timeout [ 382.579868] Bluetooth: hci6: command 0x0c1a tx timeout [ 382.580932] Bluetooth: hci4: command 0x0c1a tx timeout [ 382.581795] Bluetooth: hci5: command 0x0c1a tx timeout [ 382.582784] Bluetooth: hci3: command 0x0c1a tx timeout [ 382.583588] Bluetooth: hci2: command 0x0c1a tx timeout [ 382.584539] Bluetooth: hci1: command 0x0c1a tx timeout 15:56:12 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:56:12 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:56:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:56:12 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={0x0}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:56:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x8804) 15:56:12 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:56:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:12 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) [ 390.853304] Zero length message leads to an empty skb 15:56:12 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:56:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x8804) 15:56:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:56:12 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:56:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={0x0}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:56:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:56:12 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) [ 391.617754] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 391.619977] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 391.621347] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 391.622752] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 391.624241] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 391.631194] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 391.632496] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 391.634056] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 392.819760] Bluetooth: hci0: command 0x0c1a tx timeout [ 393.651831] Bluetooth: hci7: command 0x0c1a tx timeout [ 393.653068] Bluetooth: hci6: command 0x0c1a tx timeout [ 393.654232] Bluetooth: hci4: command 0x0c1a tx timeout [ 393.655394] Bluetooth: hci5: command 0x0c1a tx timeout [ 393.656404] Bluetooth: hci3: command 0x0c1a tx timeout [ 393.657413] Bluetooth: hci2: command 0x0c1a tx timeout [ 393.658449] Bluetooth: hci1: command 0x0c1a tx timeout 15:56:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:56:22 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:22 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:56:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={0x0}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:56:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:56:22 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:56:22 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:56:22 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:56:22 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:56:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:56:22 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:56:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:56:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:56:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:56:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) [ 401.050646] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 401.051804] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 401.052829] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 401.053884] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 401.055955] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 401.057005] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 401.058184] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 401.059255] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 402.227759] Bluetooth: hci0: command 0x0c1a tx timeout [ 403.060752] Bluetooth: hci7: command 0x0c1a tx timeout [ 403.060913] Bluetooth: hci6: command 0x0c1a tx timeout [ 403.061842] Bluetooth: hci4: command 0x0c1a tx timeout [ 403.062732] Bluetooth: hci5: command 0x0c1a tx timeout [ 403.063682] Bluetooth: hci3: command 0x0c1a tx timeout [ 403.064442] Bluetooth: hci2: command 0x0c1a tx timeout [ 403.065393] Bluetooth: hci1: command 0x0c1a tx timeout 15:56:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:56:31 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x48005}, 0x4800) 15:56:31 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:56:31 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:56:31 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:56:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:56:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:56:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) [ 410.753317] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 410.755085] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 410.755915] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 410.756727] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 410.757492] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 410.758286] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 410.759078] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 410.759868] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 411.955761] Bluetooth: hci0: command 0x0c1a tx timeout [ 412.787856] Bluetooth: hci7: command 0x0c1a tx timeout [ 412.789070] Bluetooth: hci6: command 0x0c1a tx timeout [ 412.790130] Bluetooth: hci4: command 0x0c1a tx timeout [ 412.790363] Bluetooth: hci5: command 0x0c1a tx timeout [ 412.790401] Bluetooth: hci3: command 0x0c1a tx timeout [ 412.790433] Bluetooth: hci2: command 0x0c1a tx timeout [ 412.790465] Bluetooth: hci1: command 0x0c1a tx timeout 15:56:41 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0xa24, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x68, 0x7f, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0xa24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:56:41 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14}, 0x14}}, 0x4800) 15:56:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:56:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:56:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:41 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:56:41 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) socket(0x1f, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:56:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:56:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x924, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x924}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:56:41 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_io_uring_complete(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14}, 0x14}}, 0x0) 15:56:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:56:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:56:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x734, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}]}, 0x734}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:56:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:56:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:41 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) [ 420.419866] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 420.420741] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 420.421438] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 420.422224] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 420.423512] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 420.424319] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 420.425204] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 420.425983] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 421.619719] Bluetooth: hci0: command 0x0c1a tx timeout [ 422.451712] Bluetooth: hci7: command 0x0c1a tx timeout [ 422.451832] Bluetooth: hci6: command 0x0c1a tx timeout [ 422.452223] Bluetooth: hci4: command 0x0c1a tx timeout [ 422.453308] Bluetooth: hci5: command 0x0c1a tx timeout [ 422.453704] Bluetooth: hci3: command 0x0c1a tx timeout [ 422.453724] Bluetooth: hci2: command 0x0c1a tx timeout [ 422.454710] Bluetooth: hci1: command 0x0c1a tx timeout 15:56:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:56:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x678, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x678}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:56:49 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:56:49 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:56:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:56:49 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:49 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:56:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x598, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}]}, 0x598}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:56:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:56:49 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x598, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x6, 0x2, 0x80000000}, {0x6, 0x8, 0x3f, 0x3}, {0xea3, 0x9, 0x9, 0x7}]}}}]}}]}, 0x598}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:56:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, 0x0, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:56:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:56:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:56:50 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x8010) [ 428.760474] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 428.761497] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 428.762150] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 428.762854] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 428.763420] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 428.764073] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 428.765127] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 428.765733] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 429.946984] Bluetooth: hci0: command 0x0c1a tx timeout [ 430.771784] Bluetooth: hci7: command 0x0c1a tx timeout [ 430.773088] Bluetooth: hci6: command 0x0c1a tx timeout [ 430.773145] Bluetooth: hci4: command 0x0c1a tx timeout [ 430.774259] Bluetooth: hci2: command 0x0c1a tx timeout [ 430.774694] Bluetooth: hci5: command 0x0c1a tx timeout [ 430.775860] Bluetooth: hci3: command 0x0c1a tx timeout [ 430.776233] Bluetooth: hci1: command 0x0c1a tx timeout 15:56:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, 0x0, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:56:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:56:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:56:59 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 15:56:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x40c, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x40c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:56:59 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:56:59 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:56:59 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x0, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:57:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x3c8, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:57:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x6, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:57:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x34c, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x34c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:57:00 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 15:57:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:57:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, 0x0, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:57:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:57:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x6, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:57:00 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 15:57:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x34c, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x34c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) [ 439.002223] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 439.003065] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 439.003951] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 439.004850] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 439.005757] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 439.007913] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 439.008799] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 439.009812] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 440.243722] Bluetooth: hci0: command 0x0c1a tx timeout [ 441.011805] Bluetooth: hci7: command 0x0c1a tx timeout [ 441.011883] Bluetooth: hci6: command 0x0c1a tx timeout [ 441.012679] Bluetooth: hci4: command 0x0c1a tx timeout [ 441.013749] Bluetooth: hci5: command 0x0c1a tx timeout [ 441.014461] Bluetooth: hci3: command 0x0c1a tx timeout [ 441.015680] Bluetooth: hci2: command 0x0c1a tx timeout [ 441.016178] Bluetooth: hci1: command 0x0c1a tx timeout 15:57:09 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:09 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:09 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:57:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:57:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x6, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:57:09 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) 15:57:09 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x34c, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x34c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:57:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:57:10 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:57:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x6, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:57:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x308, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x308}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:57:10 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) 15:57:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x144, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:57:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x6, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 15:57:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x6}, 0x14}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) [ 448.841726] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 448.842584] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 448.843340] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 448.844141] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 448.844918] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 448.846367] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 448.847122] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 448.848829] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 450.035669] Bluetooth: hci0: command 0x0c1a tx timeout [ 450.867768] Bluetooth: hci7: command 0x0c1a tx timeout [ 450.868374] Bluetooth: hci6: command 0x0c1a tx timeout [ 450.868922] Bluetooth: hci4: command 0x0c1a tx timeout [ 450.869426] Bluetooth: hci5: command 0x0c1a tx timeout [ 450.869963] Bluetooth: hci3: command 0x0c1a tx timeout [ 450.870456] Bluetooth: hci2: command 0x0c1a tx timeout [ 450.870962] Bluetooth: hci1: command 0x0c1a tx timeout 15:57:19 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) 15:57:19 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) socket(0x1f, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:19 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:19 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:57:19 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x144, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:57:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:57:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x6}, 0x14}}, 0x8804) 15:57:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:57:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x6}, 0x14}}, 0x0) 15:57:19 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) [ 458.447819] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 458.449265] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 458.450820] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 458.453976] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 458.455516] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 458.456995] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 458.459081] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 458.460421] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 459.635749] Bluetooth: hci0: command 0x0c1a tx timeout [ 460.467715] Bluetooth: hci7: command 0x0c1a tx timeout [ 460.468304] Bluetooth: hci6: command 0x0c1a tx timeout [ 460.468889] Bluetooth: hci4: command 0x0c1a tx timeout [ 460.469405] Bluetooth: hci5: command 0x0c1a tx timeout [ 460.469971] Bluetooth: hci3: command 0x0c1a tx timeout [ 460.470187] Bluetooth: hci2: command 0x0c1a tx timeout [ 460.470480] Bluetooth: hci1: command 0x0c1a tx timeout 15:57:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:57:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:57:27 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:27 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x14}, 0x14}}, 0x4000000) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:57:27 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) 15:57:27 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:27 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:27 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x14}, 0x14}}, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:57:27 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) 15:57:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:57:27 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) socket(0x1f, 0x4, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:57:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x14}, 0x14}}, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:57:27 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) 15:57:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) [ 466.490149] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 466.490939] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 466.491531] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 466.492190] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 466.492847] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 466.493476] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 466.494095] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 466.495377] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 467.699648] Bluetooth: hci0: command 0x0c1a tx timeout [ 468.531902] Bluetooth: hci7: command 0x0c1a tx timeout [ 468.532986] Bluetooth: hci6: command 0x0c1a tx timeout [ 468.533198] Bluetooth: hci4: command 0x0c1a tx timeout [ 468.533971] Bluetooth: hci5: command 0x0c1a tx timeout [ 468.534005] Bluetooth: hci3: command 0x0c1a tx timeout [ 468.534036] Bluetooth: hci2: command 0x0c1a tx timeout [ 468.534064] Bluetooth: hci1: command 0x0c1a tx timeout 15:57:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:57:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x14}, 0x14}}, 0x0) syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000028c0)={'ip6tnl0\x00', &(0x7f0000002840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x9, 0x9, 0x20, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xff40, 0x1, 0xff, 0x6}}) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:57:35 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:35 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:57:35 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40004000) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) 15:57:35 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:35 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:35 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) 15:57:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x14}, 0x14}}, 0x0) syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:57:35 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:57:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:57:35 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) 15:57:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x14}, 0x14}}, 0x0) syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:57:35 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x14}, 0x14}}, 0x0) syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_open_dev$vcsu(&(0x7f0000002900), 0x7, 0x10000) 15:57:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 474.577387] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 474.580164] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 474.581954] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 474.583978] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 474.586031] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 474.587423] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 474.590005] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 474.591652] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 475.827650] Bluetooth: hci0: command 0x0c1a tx timeout [ 476.595729] Bluetooth: hci7: command 0x0c1a tx timeout [ 476.595858] Bluetooth: hci6: command 0x0c1a tx timeout [ 476.596247] Bluetooth: hci4: command 0x0c1a tx timeout [ 476.597485] Bluetooth: hci5: command 0x0c1a tx timeout [ 476.597786] Bluetooth: hci3: command 0x0c1a tx timeout [ 476.597804] Bluetooth: hci2: command 0x0c1a tx timeout [ 476.598937] Bluetooth: hci1: command 0x0c1a tx timeout 15:57:46 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:46 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:57:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:57:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x14}, 0x14}}, 0x0) syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_open_dev$vcsu(0x0, 0x7, 0x10000) 15:57:46 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:46 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r2, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:46 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) 15:57:46 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x14}, 0x14}}, 0x0) syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_open_dev$vcsu(0x0, 0x7, 0x10000) 15:57:46 executing program 2: syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) 15:57:46 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) [ 485.356431] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 485.358341] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 485.359998] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 485.361885] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 485.363458] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 485.365066] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 485.366547] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 485.368096] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 486.579730] Bluetooth: hci0: command 0x0c1a tx timeout [ 487.411814] Bluetooth: hci7: command 0x0c1a tx timeout [ 487.413249] Bluetooth: hci6: command 0x0c1a tx timeout [ 487.414536] Bluetooth: hci4: command 0x0c1a tx timeout [ 487.415888] Bluetooth: hci5: command 0x0c1a tx timeout [ 487.415911] Bluetooth: hci3: command 0x0c1a tx timeout [ 487.415948] Bluetooth: hci2: command 0x0c1a tx timeout [ 487.417136] Bluetooth: hci1: command 0x0c1a tx timeout 15:57:56 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) socket(0x1f, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:56 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:57:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x14}, 0x14}}, 0x0) syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_open_dev$vcsu(0x0, 0x7, 0x10000) 15:57:56 executing program 2: syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:57:56 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:57:56 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:56 executing program 2: syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:57:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:57:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x14}, 0x14}}, 0x0) syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_open_dev$vcsu(&(0x7f0000002900), 0x0, 0x10000) 15:57:56 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:56 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:56 executing program 2: syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:57:56 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:57:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) [ 495.688138] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 495.689206] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 495.690394] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 495.691432] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 495.693049] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 495.694219] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 495.695121] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 495.696181] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 496.883678] Bluetooth: hci0: command 0x0c1a tx timeout [ 497.715696] Bluetooth: hci7: command 0x0c1a tx timeout [ 497.716210] Bluetooth: hci6: command 0x0c1a tx timeout [ 497.716686] Bluetooth: hci4: command 0x0c1a tx timeout [ 497.717129] Bluetooth: hci5: command 0x0c1a tx timeout [ 497.717563] Bluetooth: hci3: command 0x0c1a tx timeout [ 497.718033] Bluetooth: hci2: command 0x0c1a tx timeout [ 497.718083] Bluetooth: hci1: command 0x0c1a tx timeout 15:58:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000002800)={&(0x7f00000015c0), 0xc, &(0x7f00000027c0)={&(0x7f0000001d80)={0x14}, 0x14}}, 0x0) syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_open_dev$vcsu(&(0x7f0000002900), 0x0, 0x0) 15:58:05 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:58:05 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) socket(0x1f, 0x4, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:58:05 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) socket(0x1f, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:05 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:05 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:05 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:05 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:05 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:05 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) socket(0x1f, 0x4, 0x7) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:58:06 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:06 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:06 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:06 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) socket(0x1f, 0x4, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 504.849018] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 504.849977] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 504.851830] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 504.853128] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 504.853972] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 504.855928] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 504.857310] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 504.859141] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 506.099788] Bluetooth: hci0: command 0x0c1a tx timeout [ 506.867768] Bluetooth: hci7: command 0x0c1a tx timeout [ 506.869019] Bluetooth: hci6: command 0x0c1a tx timeout [ 506.869070] Bluetooth: hci4: command 0x0c1a tx timeout [ 506.870192] Bluetooth: hci5: command 0x0c1a tx timeout [ 506.870628] Bluetooth: hci3: command 0x0c1a tx timeout [ 506.871768] Bluetooth: hci2: command 0x0c1a tx timeout [ 506.872085] Bluetooth: hci1: command 0x0c1a tx timeout 15:58:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:58:14 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:14 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x80044) socket(0x1f, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:14 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) socket(0x1f, 0x4, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:58:14 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) socket$nl_generic(0x10, 0x3, 0x10) 15:58:14 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:14 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:14 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) socket(0x1f, 0x4, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:14 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) socket$nl_generic(0x10, 0x3, 0x10) 15:58:14 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:58:14 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:14 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:14 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) socket$nl_generic(0x10, 0x3, 0x10) 15:58:14 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) socket(0x1f, 0x4, 0x7) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, 0x0, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:58:14 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 513.579534] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 513.581045] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 513.582161] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 513.587568] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 513.588408] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 513.589494] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 513.591099] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 513.592520] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 514.803815] Bluetooth: hci0: command 0x0c1a tx timeout [ 515.635988] Bluetooth: hci7: command 0x0c1a tx timeout [ 515.637252] Bluetooth: hci6: command 0x0c1a tx timeout [ 515.638455] Bluetooth: hci4: command 0x0c1a tx timeout [ 515.638479] Bluetooth: hci5: command 0x0c1a tx timeout [ 515.639644] Bluetooth: hci3: command 0x0c1a tx timeout [ 515.640096] Bluetooth: hci2: command 0x0c1a tx timeout [ 515.641214] Bluetooth: hci1: command 0x0c1a tx timeout 15:58:22 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:22 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:58:22 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) socket(0x1f, 0x4, 0x7) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:22 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x80044) socket(0x1f, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, 0x0, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:58:22 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:22 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:22 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:23 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:23 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:23 executing program 7: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:23 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:23 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) socket(0x1f, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:23 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:23 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 521.909692] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 521.910381] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 521.911141] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 521.913255] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 521.913868] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 521.914449] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 521.915658] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 521.916257] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 523.123674] Bluetooth: hci0: command 0x0c1a tx timeout [ 523.955710] Bluetooth: hci7: command 0x0c1a tx timeout [ 523.956363] Bluetooth: hci6: command 0x0c1a tx timeout [ 523.956957] Bluetooth: hci4: command 0x0c1a tx timeout [ 523.957511] Bluetooth: hci5: command 0x0c1a tx timeout [ 523.958109] Bluetooth: hci3: command 0x0c1a tx timeout [ 523.958453] Bluetooth: hci2: command 0x0c1a tx timeout [ 523.958678] Bluetooth: hci1: command 0x0c1a tx timeout 15:58:31 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:31 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) socket(0x1f, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:58:31 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:31 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:31 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, 0x0, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:58:31 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:31 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:31 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:31 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:31 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:31 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) socket(0x1f, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x40004000) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:58:31 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:31 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 530.588193] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 530.592206] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 530.593470] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 530.595544] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 530.597999] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 530.600009] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 530.601186] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 530.603321] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 531.827706] Bluetooth: hci0: command 0x0c1a tx timeout [ 532.595769] Bluetooth: hci3: command 0x0c1a tx timeout [ 532.596923] Bluetooth: hci2: command 0x0c1a tx timeout [ 532.597018] Bluetooth: hci1: command 0x0c1a tx timeout [ 532.659737] Bluetooth: hci7: command 0x0c1a tx timeout [ 532.659807] Bluetooth: hci6: command 0x0c1a tx timeout [ 532.660552] Bluetooth: hci4: command 0x0c1a tx timeout [ 532.661640] Bluetooth: hci5: command 0x0c1a tx timeout 15:58:41 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:41 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:41 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:58:41 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:41 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:41 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:58:41 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:41 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, &(0x7f0000000ac0)) 15:58:41 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:41 executing program 7: syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:41 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:41 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) [ 540.433840] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 540.436218] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 540.439044] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 540.441095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 540.443083] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 540.445175] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 540.447495] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 540.449095] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 541.619801] Bluetooth: hci0: command 0x0c1a tx timeout [ 542.451771] Bluetooth: hci7: command 0x0c1a tx timeout [ 542.452939] Bluetooth: hci6: command 0x0c1a tx timeout [ 542.452990] Bluetooth: hci4: command 0x0c1a tx timeout [ 542.453954] Bluetooth: hci5: command 0x0c1a tx timeout [ 542.454736] Bluetooth: hci3: command 0x0c1a tx timeout [ 542.455694] Bluetooth: hci2: command 0x0c1a tx timeout [ 542.456370] Bluetooth: hci1: command 0x0c1a tx timeout 15:58:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:58:52 executing program 7: syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:52 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:58:52 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, &(0x7f0000000ac0)) 15:58:52 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:52 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:52 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb216}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xaa, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast1, 0x644}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x54cf2670}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:52 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:52 executing program 7: syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:52 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, &(0x7f0000000ac0)) 15:58:52 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x80044) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:52 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x80, 0xca, 0x1ff, 0x0, 0x9, 0xffff, 0x5, 0x1]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x80044) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:52 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:58:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r0) 15:58:52 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), 0x0) [ 551.357790] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 551.359166] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 551.362089] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 551.363568] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 551.365952] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 551.368032] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 551.373778] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 551.375353] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 552.563782] Bluetooth: hci0: command 0x0c1a tx timeout [ 553.395807] Bluetooth: hci7: command 0x0c1a tx timeout [ 553.395838] Bluetooth: hci6: command 0x0c1a tx timeout [ 553.396960] Bluetooth: hci4: command 0x0c1a tx timeout [ 553.397436] Bluetooth: hci5: command 0x0c1a tx timeout [ 553.398417] Bluetooth: hci3: command 0x0c1a tx timeout [ 553.398877] Bluetooth: hci2: command 0x0c1a tx timeout [ 553.399825] Bluetooth: hci1: command 0x0c1a tx timeout 15:59:01 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:01 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(0x0, r0) 15:59:01 executing program 7: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:01 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x80044) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:59:01 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:01 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), 0x0) 15:59:01 executing program 7: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:01 executing program 7: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:01 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:01 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, &(0x7f0000000ac0)) 15:59:01 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), 0x0) 15:59:01 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x80044) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:01 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:01 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, &(0x7f0000000ac0)) [ 560.389394] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 560.390534] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 560.391952] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 560.393156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 560.394220] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 560.395293] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 560.396361] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 560.397397] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 561.651673] Bluetooth: hci0: command 0x0c1a tx timeout [ 562.419841] Bluetooth: hci7: command 0x0c1a tx timeout [ 562.420551] Bluetooth: hci6: command 0x0c1a tx timeout [ 562.421207] Bluetooth: hci4: command 0x0c1a tx timeout [ 562.421845] Bluetooth: hci5: command 0x0c1a tx timeout [ 562.422199] Bluetooth: hci3: command 0x0c1a tx timeout [ 562.422447] Bluetooth: hci2: command 0x0c1a tx timeout [ 562.423564] Bluetooth: hci1: command 0x0c1a tx timeout 15:59:11 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:11 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:11 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, &(0x7f0000000ac0)) 15:59:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:59:11 executing program 2: r0 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:59:11 executing program 7: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:11 executing program 4: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:11 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), 0x0) 15:59:11 executing program 7: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:59:11 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), 0x0) 15:59:11 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:11 executing program 2: r0 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:11 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), 0x0) [ 570.202732] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 570.203452] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 570.204142] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 570.204869] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 570.205498] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 570.206168] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 570.206838] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 570.207477] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 571.507772] Bluetooth: hci0: command 0x0c1a tx timeout [ 572.212686] Bluetooth: hci7: command 0x0c1a tx timeout [ 572.213570] Bluetooth: hci6: command 0x0c1a tx timeout [ 572.213673] Bluetooth: hci4: command 0x0c1a tx timeout [ 572.214398] Bluetooth: hci5: command 0x0c1a tx timeout [ 572.215030] Bluetooth: hci3: command 0x0c1a tx timeout [ 572.215773] Bluetooth: hci2: command 0x0c1a tx timeout [ 572.216286] Bluetooth: hci1: command 0x0c1a tx timeout 15:59:21 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:21 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:21 executing program 4: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:21 executing program 2: r0 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) syz_io_uring_complete(0x0) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/pid_for_children\x00') syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:59:21 executing program 7: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:21 executing program 1: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:59:22 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) r0 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:22 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:22 executing program 1: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:22 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) r0 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:22 executing program 7: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, &(0x7f0000000ac0)) 15:59:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:59:22 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:22 executing program 1: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:22 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) r0 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 580.971480] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 580.972326] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 580.973324] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 580.974977] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 580.976121] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 580.978159] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 580.980396] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 580.981581] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 582.259674] Bluetooth: hci0: command 0x0c1a tx timeout [ 583.028225] Bluetooth: hci7: command 0x0c1a tx timeout [ 583.028271] Bluetooth: hci6: command 0x0c1a tx timeout [ 583.028786] Bluetooth: hci4: command 0x0c1a tx timeout [ 583.029878] Bluetooth: hci5: command 0x0c1a tx timeout [ 583.030303] Bluetooth: hci3: command 0x0c1a tx timeout [ 583.031363] Bluetooth: hci2: command 0x0c1a tx timeout [ 583.031809] Bluetooth: hci1: command 0x0c1a tx timeout 15:59:31 executing program 7: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, &(0x7f0000000ac0)) 15:59:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:59:31 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:31 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:31 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:31 executing program 4: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:31 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:31 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) r0 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:31 executing program 7: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, &(0x7f0000000ac0)) 15:59:31 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:31 executing program 7: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), 0x0) 15:59:31 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) r0 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:31 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:31 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:31 executing program 7: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), 0x0) [ 590.206582] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 590.210352] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 590.211937] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 590.213496] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 590.215455] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 590.217002] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 590.218351] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 590.219840] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 591.412865] Bluetooth: hci0: command 0x0c1a tx timeout [ 592.243747] Bluetooth: hci7: command 0x0c1a tx timeout [ 592.243831] Bluetooth: hci6: command 0x0c1a tx timeout [ 592.244892] Bluetooth: hci4: command 0x0c1a tx timeout [ 592.245740] Bluetooth: hci5: command 0x0c1a tx timeout [ 592.247464] Bluetooth: hci3: command 0x0c1a tx timeout [ 592.248290] Bluetooth: hci2: command 0x0c1a tx timeout [ 592.249115] Bluetooth: hci1: command 0x0c1a tx timeout 15:59:40 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) r0 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:40 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:40 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:40 executing program 4: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) 15:59:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:59:40 executing program 7: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), 0x0) 15:59:40 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x0) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:40 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:40 executing program 1: syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:40 executing program 1: syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:40 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:40 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:40 executing program 1: syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:40 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) r0 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:59:40 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:40 executing program 1: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:40 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 599.629935] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 599.631476] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 599.634071] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 599.634916] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 599.636224] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 599.637662] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 599.638501] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 599.639527] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 600.883758] Bluetooth: hci0: command 0x0c1a tx timeout [ 601.652688] Bluetooth: hci7: command 0x0c1a tx timeout [ 601.653268] Bluetooth: hci6: command 0x0c1a tx timeout [ 601.653791] Bluetooth: hci4: command 0x0c1a tx timeout [ 601.654545] Bluetooth: hci5: command 0x0c1a tx timeout [ 601.655507] Bluetooth: hci3: command 0x0c1a tx timeout [ 601.656218] Bluetooth: hci2: command 0x0c1a tx timeout [ 601.657191] Bluetooth: hci1: command 0x0c1a tx timeout 15:59:50 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:50 executing program 4: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 15:59:50 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x0) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 15:59:50 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x4a, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:50 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:50 executing program 1: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:50 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) r0 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:50 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:50 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) r0 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:50 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:50 executing program 1: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:51 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) r0 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:51 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 15:59:51 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x3f, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 609.869962] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 609.871076] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 609.872127] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 609.873170] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 609.874342] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 609.875367] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 609.876447] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 609.877477] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 611.059758] Bluetooth: hci0: command 0x0c1a tx timeout [ 611.891939] Bluetooth: hci7: command 0x0c1a tx timeout [ 611.893097] Bluetooth: hci6: command 0x0c1a tx timeout [ 611.894144] Bluetooth: hci4: command 0x0c1a tx timeout [ 611.895201] Bluetooth: hci5: command 0x0c1a tx timeout [ 611.895245] Bluetooth: hci3: command 0x0c1a tx timeout [ 611.896219] Bluetooth: hci2: command 0x0c1a tx timeout [ 611.896984] Bluetooth: hci1: command 0x0c1a tx timeout 16:00:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:00:01 executing program 1: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:01 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:01 executing program 4: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) 16:00:01 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:01 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:01 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x0) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:01 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) r0 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:02 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:02 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) r0 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:02 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:02 executing program 1: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:02 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x7f, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:02 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) socket(0x1f, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:02 executing program 1: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:02 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) [ 620.981213] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 620.982522] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 620.983807] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 620.986311] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 620.987535] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 620.989298] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 620.991339] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 620.992516] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 622.195808] Bluetooth: hci0: command 0x0c1a tx timeout [ 623.027824] Bluetooth: hci7: command 0x0c1a tx timeout [ 623.027890] Bluetooth: hci6: command 0x0c1a tx timeout [ 623.028799] Bluetooth: hci4: command 0x0c1a tx timeout [ 623.029860] Bluetooth: hci5: command 0x0c1a tx timeout [ 623.031731] Bluetooth: hci3: command 0x0c1a tx timeout [ 623.032314] Bluetooth: hci2: command 0x0c1a tx timeout [ 623.032730] Bluetooth: hci1: command 0x0c1a tx timeout 16:00:13 executing program 1: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, &(0x7f0000000ac0)) 16:00:13 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:13 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:13 executing program 4: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1, 0x63, 0x0, 0x6, 0x4}, 0x7) 16:00:13 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x0, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:13 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:13 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:00:13 executing program 7: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:13 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:13 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, &(0x7f0000000ac0)) 16:00:13 executing program 1: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, &(0x7f0000000ac0)) 16:00:13 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:13 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:13 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, &(0x7f0000000ac0)) [ 632.630637] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 632.632003] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 632.633507] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 632.635032] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 632.636304] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 632.637687] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 632.639064] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 632.640355] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 633.843700] Bluetooth: hci0: command 0x0c1a tx timeout [ 634.675776] Bluetooth: hci7: command 0x0c1a tx timeout [ 634.676673] Bluetooth: hci6: command 0x0c1a tx timeout [ 634.676747] Bluetooth: hci4: command 0x0c1a tx timeout [ 634.677484] Bluetooth: hci5: command 0x0c1a tx timeout [ 634.678543] Bluetooth: hci3: command 0x0c1a tx timeout [ 634.679256] Bluetooth: hci2: command 0x0c1a tx timeout [ 634.680245] Bluetooth: hci1: command 0x0c1a tx timeout 16:00:24 executing program 4: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) 16:00:24 executing program 1: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, &(0x7f0000000ac0)) 16:00:24 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:24 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x0, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:00:24 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:24 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, &(0x7f0000000ac0)) 16:00:24 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:25 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:25 executing program 1: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), 0x0) 16:00:25 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:25 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), 0x0) 16:00:25 executing program 1: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), 0x0) 16:00:25 executing program 7: r0 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:25 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:25 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), 0x0) [ 643.989000] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 643.990295] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 643.992830] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 643.996160] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 643.999971] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 644.001297] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 644.003632] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 644.006073] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 645.172727] Bluetooth: hci0: command 0x0c1a tx timeout [ 646.003764] Bluetooth: hci6: command 0x0c1a tx timeout [ 646.004650] Bluetooth: hci4: command 0x0c1a tx timeout [ 646.004691] Bluetooth: hci5: command 0x0c1a tx timeout [ 646.005479] Bluetooth: hci3: command 0x0c1a tx timeout [ 646.006430] Bluetooth: hci2: command 0x0c1a tx timeout [ 646.007232] Bluetooth: hci1: command 0x0c1a tx timeout [ 646.067729] Bluetooth: hci7: command 0x0c1a tx timeout 16:00:36 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x0, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:36 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:00:36 executing program 1: syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), 0x0) 16:00:36 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x0, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), 0x0) 16:00:36 executing program 7: r0 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:36 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:36 executing program 4: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) 16:00:36 executing program 7: r0 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:36 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:36 executing program 1: r0 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:00:37 executing program 4: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) 16:00:37 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:37 executing program 7: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:37 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x0, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 655.694503] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 655.697446] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 655.699425] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 655.705049] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 655.708550] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 655.711327] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 655.713882] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 655.725577] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 656.883729] Bluetooth: hci0: command 0x0c1a tx timeout [ 657.715734] Bluetooth: hci6: command 0x0c1a tx timeout [ 657.715809] Bluetooth: hci4: command 0x0c1a tx timeout [ 657.716676] Bluetooth: hci5: command 0x0c1a tx timeout [ 657.717476] Bluetooth: hci3: command 0x0c1a tx timeout [ 657.718524] Bluetooth: hci2: command 0x0c1a tx timeout [ 657.719160] Bluetooth: hci1: command 0x0c1a tx timeout [ 657.779677] Bluetooth: hci7: command 0x0c1a tx timeout 16:00:46 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:46 executing program 4: socket(0x0, 0x4, 0x7) 16:00:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:00:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:00:46 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:46 executing program 7: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:46 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:46 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:46 executing program 7: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:46 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:46 executing program 7: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:46 executing program 4: socket(0x0, 0x0, 0x7) 16:00:46 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:00:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:00:46 executing program 7: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 665.567885] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 665.569288] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 665.572350] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 665.575655] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 665.580538] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 665.583574] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 665.587669] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 665.589318] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 666.739794] Bluetooth: hci0: command 0x0c1a tx timeout [ 667.571775] Bluetooth: hci1: command 0x0c1a tx timeout [ 667.635719] Bluetooth: hci7: command 0x0c1a tx timeout [ 667.636821] Bluetooth: hci6: command 0x0c1a tx timeout [ 667.637896] Bluetooth: hci4: command 0x0c1a tx timeout [ 667.637953] Bluetooth: hci5: command 0x0c1a tx timeout [ 667.638933] Bluetooth: hci3: command 0x0c1a tx timeout [ 667.639707] Bluetooth: hci2: command 0x0c1a tx timeout 16:00:56 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:56 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:00:56 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x0, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:56 executing program 7: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:56 executing program 4: socket(0x0, 0x0, 0x0) 16:00:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:00:56 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:56 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x0, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:57 executing program 7: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:00:57 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x0, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:00:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 16:00:57 executing program 7: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:00:57 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x0, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 675.837535] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 675.838846] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 675.840793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 675.841989] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 675.844368] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 675.845892] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 675.847797] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 675.849262] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 677.043677] Bluetooth: hci0: command 0x0c1a tx timeout [ 677.875762] Bluetooth: hci7: command 0x0c1a tx timeout [ 677.875804] Bluetooth: hci6: command 0x0c1a tx timeout [ 677.876943] Bluetooth: hci4: command 0x0c1a tx timeout [ 677.877375] Bluetooth: hci5: command 0x0c1a tx timeout [ 677.878438] Bluetooth: hci3: command 0x0c1a tx timeout [ 677.878818] Bluetooth: hci2: command 0x0c1a tx timeout [ 677.880106] Bluetooth: hci1: command 0x0c1a tx timeout 16:01:07 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:01:07 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x0, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:07 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x0, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 16:01:07 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:01:07 executing program 7: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:07 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:07 executing program 7: syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:07 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x0, 0x5}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 16:01:07 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:01:07 executing program 7: syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x0, 0x0, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) [ 686.079093] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 686.079885] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 686.080496] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 686.081449] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 686.082341] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 686.083741] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 686.084357] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 686.085320] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 687.283655] Bluetooth: hci0: command 0x0c1a tx timeout [ 688.115764] Bluetooth: hci7: command 0x0c1a tx timeout [ 688.115845] Bluetooth: hci6: command 0x0c1a tx timeout [ 688.116271] Bluetooth: hci4: command 0x0c1a tx timeout [ 688.117309] Bluetooth: hci5: command 0x0c1a tx timeout [ 688.117691] Bluetooth: hci3: command 0x0c1a tx timeout [ 688.117711] Bluetooth: hci2: command 0x0c1a tx timeout [ 688.118651] Bluetooth: hci1: command 0x0c1a tx timeout 16:01:16 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:16 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:16 executing program 7: syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 16:01:16 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 16:01:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x0, 0x0, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:01:16 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:16 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff}}) r1 = socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:17 executing program 7: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:17 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x0, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:17 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x0, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 16:01:17 executing program 7: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x0, 0x0, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:01:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) [ 695.932151] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 695.933111] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 695.934705] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 695.935382] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 695.937213] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 695.938990] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 695.940452] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 695.942150] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 697.139722] Bluetooth: hci0: command 0x0c1a tx timeout [ 697.971796] Bluetooth: hci6: command 0x0c1a tx timeout [ 697.972074] Bluetooth: hci4: command 0x0c1a tx timeout [ 697.973567] Bluetooth: hci5: command 0x0c1a tx timeout [ 697.973889] Bluetooth: hci3: command 0x0c1a tx timeout [ 697.974825] Bluetooth: hci2: command 0x0c1a tx timeout [ 697.975753] Bluetooth: hci1: command 0x0c1a tx timeout [ 697.976708] Bluetooth: hci7: command 0x0c1a tx timeout 16:01:25 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 16:01:25 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) 16:01:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:01:25 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:25 executing program 7: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:25 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x0, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:25 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x0, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:25 executing program 7: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:25 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x0, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) 16:01:25 executing program 7: syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00), &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 16:01:25 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x0, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) [ 704.357755] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 704.358556] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 704.360262] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 704.361172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 704.363294] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 704.364209] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 704.365284] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 704.367364] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 705.587630] Bluetooth: hci0: command 0x0c1a tx timeout [ 706.419700] Bluetooth: hci7: command 0x0c1a tx timeout [ 706.420221] Bluetooth: hci6: command 0x0c1a tx timeout [ 706.420684] Bluetooth: hci4: command 0x0c1a tx timeout [ 706.421126] Bluetooth: hci5: command 0x0c1a tx timeout [ 706.421565] Bluetooth: hci3: command 0x0c1a tx timeout [ 706.422041] Bluetooth: hci2: command 0x0c1a tx timeout [ 706.422479] Bluetooth: hci1: command 0x0c1a tx timeout 16:01:34 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) 16:01:34 executing program 7: syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00), &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, &(0x7f0000000ac0)) 16:01:34 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:34 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 16:01:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:01:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) 16:01:34 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:34 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:35 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) r1 = socket(0x1f, 0x4, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r2 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r2}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:35 executing program 7: syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00), &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, &(0x7f0000000ac0)) 16:01:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:01:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 16:01:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) 16:01:35 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:35 executing program 7: syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00), &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, 0x0, &(0x7f0000000ac0)) [ 713.933895] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 713.935360] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 713.936173] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 713.937012] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 713.937888] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 713.939239] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 713.939987] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 713.940828] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 715.123660] Bluetooth: hci0: command 0x0c1a tx timeout [ 715.955735] Bluetooth: hci7: command 0x0c1a tx timeout [ 715.956494] Bluetooth: hci6: command 0x0c1a tx timeout [ 715.957208] Bluetooth: hci4: command 0x0c1a tx timeout [ 715.957273] Bluetooth: hci5: command 0x0c1a tx timeout [ 715.957896] Bluetooth: hci3: command 0x0c1a tx timeout [ 715.957921] Bluetooth: hci2: command 0x0c1a tx timeout [ 715.959026] Bluetooth: hci1: command 0x0c1a tx timeout 16:01:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 16:01:45 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:45 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:45 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:45 executing program 7: syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00), &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), 0x0) 16:01:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:01:45 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 16:01:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:01:45 executing program 7: syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00), &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), 0x0) 16:01:45 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 16:01:45 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:45 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:45 executing program 7: syz_io_uring_setup(0x36aa, &(0x7f00000005c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00), &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), 0x0) 16:01:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:01:45 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 16:01:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) [ 724.383706] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 724.385248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 724.386511] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 724.389046] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 724.390642] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 724.393933] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 724.395211] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 724.398703] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 725.619630] Bluetooth: hci0: command 0x0c1a tx timeout [ 726.387654] Bluetooth: hci2: command 0x0c1a tx timeout [ 726.388169] Bluetooth: hci1: command 0x0c1a tx timeout [ 726.451719] Bluetooth: hci7: command 0x0c1a tx timeout [ 726.452231] Bluetooth: hci6: command 0x0c1a tx timeout [ 726.452705] Bluetooth: hci4: command 0x0c1a tx timeout [ 726.453137] Bluetooth: hci5: command 0x0c1a tx timeout [ 726.453563] Bluetooth: hci3: command 0x0c1a tx timeout 16:01:58 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 16:01:58 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x0, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:58 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:01:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(0x0, r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:01:58 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) 16:01:58 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:58 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:58 executing program 7: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:58 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 16:01:58 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:01:58 executing program 7: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(0x0, r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:01:58 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:58 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) 16:01:58 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 737.461687] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 737.462949] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 737.465151] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 737.466244] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 737.467375] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 737.468435] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 737.469715] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 737.470859] Bluetooth: hci7: Opcode 0x0c1a failed: -4 16:01:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(0x0, r0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:01:59 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:59 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', 0x0}) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:59 executing program 5: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:01:59 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1, 0x63, 0x0, 0x6, 0x4}, 0x7) 16:01:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:01:59 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00'}) [ 738.450491] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 738.452415] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 738.453759] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 738.462234] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 738.464319] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 738.466848] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 738.468108] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 738.470255] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 739.635714] Bluetooth: hci0: command 0x0c1a tx timeout [ 740.467792] Bluetooth: hci4: command 0x0c1a tx timeout [ 740.467886] Bluetooth: hci5: command 0x0c1a tx timeout [ 740.468703] Bluetooth: hci3: command 0x0c1a tx timeout [ 740.469572] Bluetooth: hci2: command 0x0c1a tx timeout [ 740.470384] Bluetooth: hci1: command 0x0c1a tx timeout [ 740.531682] Bluetooth: hci7: command 0x0c1a tx timeout [ 740.531720] Bluetooth: hci6: command 0x0c1a tx timeout 16:02:09 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', 0x0}) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:09 executing program 7: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:09 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:09 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1, 0x63, 0x0, 0x6, 0x4}, 0x7) 16:02:09 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:02:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:02:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 16:02:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 16:02:09 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', 0x0}) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:09 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 748.224067] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 748.226460] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 748.229120] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 748.231967] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 748.233995] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 748.235876] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 748.237942] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 748.240139] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 749.427702] Bluetooth: hci0: command 0x0c1a tx timeout [ 750.259729] Bluetooth: hci7: command 0x0c1a tx timeout [ 750.259766] Bluetooth: hci6: command 0x0c1a tx timeout [ 750.259800] Bluetooth: hci4: command 0x0c1a tx timeout [ 750.260906] Bluetooth: hci5: command 0x0c1a tx timeout [ 750.261422] Bluetooth: hci3: command 0x0c1a tx timeout [ 750.262438] Bluetooth: hci2: command 0x0c1a tx timeout [ 750.262995] Bluetooth: hci1: command 0x0c1a tx timeout 16:02:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 16:02:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:02:18 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:02:18 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:18 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:18 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) 16:02:18 executing program 7: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:18 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:18 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:18 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:18 executing program 1: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), 0xffffffffffffffff) 16:02:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:02:18 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 757.441846] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 757.443455] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 757.445469] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 757.447355] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 757.449288] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 757.450914] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 757.452452] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 757.454079] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 758.643702] Bluetooth: hci0: command 0x0c1a tx timeout [ 759.475731] Bluetooth: hci7: command 0x0c1a tx timeout [ 759.475747] Bluetooth: hci6: command 0x0c1a tx timeout [ 759.476254] Bluetooth: hci4: command 0x0c1a tx timeout [ 759.477281] Bluetooth: hci5: command 0x0c1a tx timeout [ 759.477624] Bluetooth: hci3: command 0x0c1a tx timeout [ 759.477642] Bluetooth: hci2: command 0x0c1a tx timeout [ 759.478547] Bluetooth: hci1: command 0x0c1a tx timeout 16:02:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), 0xffffffffffffffff) 16:02:28 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:28 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:28 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:02:28 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) 16:02:28 executing program 7: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) 16:02:28 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:28 executing program 5: r0 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:28 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), 0xffffffffffffffff) 16:02:29 executing program 5: r0 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:29 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) [ 767.648669] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 767.649874] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 767.654099] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 767.655554] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 767.657114] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 767.658426] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 767.660973] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 767.662363] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 768.883686] Bluetooth: hci0: command 0x0c1a tx timeout [ 769.651735] Bluetooth: hci1: command 0x0c1a tx timeout [ 769.715936] Bluetooth: hci7: command 0x0c1a tx timeout [ 769.717206] Bluetooth: hci6: command 0x0c1a tx timeout [ 769.718242] Bluetooth: hci4: command 0x0c1a tx timeout [ 769.718280] Bluetooth: hci5: command 0x0c1a tx timeout [ 769.719190] Bluetooth: hci3: command 0x0c1a tx timeout [ 769.719745] Bluetooth: hci2: command 0x0c1a tx timeout 16:02:37 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:37 executing program 7: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 16:02:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:02:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:02:37 executing program 5: r0 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:37 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x0, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:37 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) 16:02:37 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:02:37 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:37 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x0, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:37 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:02:37 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:37 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x0, 0x3, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 776.261288] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 776.265255] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 776.270096] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 776.271525] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 776.274288] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 776.276210] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 776.277571] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 776.279558] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 777.459794] Bluetooth: hci0: command 0x0c1a tx timeout [ 778.293638] Bluetooth: hci7: command 0x0c1a tx timeout [ 778.294518] Bluetooth: hci6: command 0x0c1a tx timeout [ 778.294955] Bluetooth: hci4: command 0x0c1a tx timeout [ 778.295441] Bluetooth: hci5: command 0x0c1a tx timeout [ 778.297325] Bluetooth: hci3: command 0x0c1a tx timeout [ 778.298221] Bluetooth: hci2: command 0x0c1a tx timeout [ 778.298265] Bluetooth: hci1: command 0x0c1a tx timeout 16:02:48 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:48 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:48 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:02:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:02:48 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) 16:02:48 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) 16:02:48 executing program 7: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) 16:02:48 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:48 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x0, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:48 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:48 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:02:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:02:48 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:48 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x0, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 787.456820] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 787.458401] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 787.459525] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 787.461201] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 787.462095] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 787.463949] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 787.465077] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 787.466196] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 788.659709] Bluetooth: hci0: command 0x0c1a tx timeout [ 789.491754] Bluetooth: hci7: command 0x0c1a tx timeout [ 789.492928] Bluetooth: hci6: command 0x0c1a tx timeout [ 789.492945] Bluetooth: hci4: command 0x0c1a tx timeout [ 789.493986] Bluetooth: hci5: command 0x0c1a tx timeout [ 789.494312] Bluetooth: hci3: command 0x0c1a tx timeout [ 789.495347] Bluetooth: hci2: command 0x0c1a tx timeout [ 789.495728] Bluetooth: hci1: command 0x0c1a tx timeout 16:02:58 executing program 7: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x4, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) 16:02:58 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 16:02:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:02:58 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x0, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:58 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) 16:02:58 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x63, 0x0, 0x6, 0x4}, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:58 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:02:58 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:58 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x0, 0x40, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:02:58 executing program 4: sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r0 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) 16:02:58 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:58 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:58 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:02:58 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 797.133953] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 797.136095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 797.137481] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 797.140874] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 797.142209] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 797.143536] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 797.145324] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 797.146669] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 798.323636] Bluetooth: hci0: command 0x0c1a tx timeout [ 799.155798] Bluetooth: hci7: command 0x0c1a tx timeout [ 799.156726] Bluetooth: hci6: command 0x0c1a tx timeout [ 799.156808] Bluetooth: hci4: command 0x0c1a tx timeout [ 799.157508] Bluetooth: hci5: command 0x0c1a tx timeout [ 799.158519] Bluetooth: hci3: command 0x0c1a tx timeout [ 799.159260] Bluetooth: hci2: command 0x0c1a tx timeout [ 799.160194] Bluetooth: hci1: command 0x0c1a tx timeout 16:03:08 executing program 7: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) 16:03:08 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:08 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:08 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev={0xfe, 0x80, '\x00', 0x2e}, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:08 executing program 3: openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) 16:03:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:03:08 executing program 4: sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r0 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) 16:03:08 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 16:03:08 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:08 executing program 3: openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) 16:03:08 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:08 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:08 executing program 4: sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r0 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) 16:03:08 executing program 3: openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) 16:03:08 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0xabd65ffa362461e6, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:08 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 807.616962] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 807.618133] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 807.619504] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 807.620743] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 807.623019] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 807.624066] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 807.625220] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 807.626414] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 808.826662] Bluetooth: hci0: command 0x0c1a tx timeout [ 809.651812] Bluetooth: hci7: command 0x0c1a tx timeout [ 809.651892] Bluetooth: hci6: command 0x0c1a tx timeout [ 809.652719] Bluetooth: hci4: command 0x0c1a tx timeout [ 809.653936] Bluetooth: hci5: command 0x0c1a tx timeout [ 809.654704] Bluetooth: hci3: command 0x0c1a tx timeout [ 809.656679] Bluetooth: hci2: command 0x0c1a tx timeout [ 809.656731] Bluetooth: hci1: command 0x0c1a tx timeout 16:03:19 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) 16:03:19 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 16:03:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:03:19 executing program 7: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) 16:03:19 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:19 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:19 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r0 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) 16:03:19 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:19 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:19 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:19 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x0, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:03:20 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, 0x0, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:20 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r0 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) 16:03:20 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, 0x0, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:20 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x0, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 818.766990] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 818.767993] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 818.769753] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 818.771180] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 818.772433] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 818.773448] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 818.774698] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 818.775568] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 820.019754] Bluetooth: hci0: command 0x0c1a tx timeout [ 820.788210] Bluetooth: hci7: command 0x0c1a tx timeout [ 820.789308] Bluetooth: hci6: command 0x0c1a tx timeout [ 820.790287] Bluetooth: hci4: command 0x0c1a tx timeout [ 820.791122] Bluetooth: hci5: command 0x0c1a tx timeout [ 820.791183] Bluetooth: hci3: command 0x0c1a tx timeout [ 820.791945] Bluetooth: hci2: command 0x0c1a tx timeout [ 820.792943] Bluetooth: hci1: command 0x0c1a tx timeout 16:03:30 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) 16:03:30 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) 16:03:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:03:30 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, 0x0, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:30 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x0, 0x7f, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:30 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r0 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) 16:03:30 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:30 executing program 7: openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) 16:03:30 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:30 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28, 0x0, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, 0x0, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:03:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:03:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, 0x0, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:03:30 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28, 0x0, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:30 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, 0x0, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) [ 829.113475] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 829.114353] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 829.115821] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 829.116564] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 829.117987] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 829.118845] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 829.120259] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 829.121242] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 830.323648] Bluetooth: hci0: command 0x0c1a tx timeout [ 831.155733] Bluetooth: hci7: command 0x0c1a tx timeout [ 831.156407] Bluetooth: hci6: command 0x0c1a tx timeout [ 831.157069] Bluetooth: hci4: command 0x0c1a tx timeout [ 831.157128] Bluetooth: hci5: command 0x0c1a tx timeout [ 831.157688] Bluetooth: hci2: command 0x0c1a tx timeout [ 831.158501] Bluetooth: hci3: command 0x0c1a tx timeout [ 831.159113] Bluetooth: hci1: command 0x0c1a tx timeout 16:03:39 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1, 0x63, 0x0, 0x6, 0x4}, 0x7) 16:03:39 executing program 3: openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) 16:03:39 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:03:39 executing program 7: openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) 16:03:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:03:39 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28, 0x0, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:39 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:39 executing program 7: openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) 16:03:39 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:39 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:03:39 executing program 7: openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) 16:03:39 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:03:39 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 838.443219] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 838.444432] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 838.445511] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 838.446649] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 838.447789] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 838.448923] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 838.449982] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 838.451113] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 839.667641] Bluetooth: hci0: command 0x0c1a tx timeout [ 840.499709] Bluetooth: hci7: command 0x0c1a tx timeout [ 840.500229] Bluetooth: hci6: command 0x0c1a tx timeout [ 840.500707] Bluetooth: hci4: command 0x0c1a tx timeout [ 840.501138] Bluetooth: hci5: command 0x0c1a tx timeout [ 840.501593] Bluetooth: hci3: command 0x0c1a tx timeout [ 840.502035] Bluetooth: hci2: command 0x0c1a tx timeout [ 840.502103] Bluetooth: hci1: command 0x0c1a tx timeout 16:03:48 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:48 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x0, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:48 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) 16:03:48 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28, 0x0, 0x3}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:03:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:03:48 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:48 executing program 7: openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) 16:03:48 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:48 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:48 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x0, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:03:48 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:48 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:48 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x0, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:03:49 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:49 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 847.574321] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 847.576330] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 847.578306] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 847.580988] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 847.583198] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 847.589429] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 847.590827] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 847.593041] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 848.755693] Bluetooth: hci0: command 0x0c1a tx timeout [ 849.587699] Bluetooth: hci5: command 0x0c1a tx timeout [ 849.588785] Bluetooth: hci3: command 0x0c1a tx timeout [ 849.588814] Bluetooth: hci2: command 0x0c1a tx timeout [ 849.589786] Bluetooth: hci1: command 0x0c1a tx timeout [ 849.651838] Bluetooth: hci7: command 0x0c1a tx timeout [ 849.651906] Bluetooth: hci6: command 0x0c1a tx timeout [ 849.652332] Bluetooth: hci4: command 0x0c1a tx timeout 16:03:57 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:57 executing program 7: openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) 16:03:57 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:57 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:03:57 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:03:57 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) 16:03:57 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:57 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) 16:03:58 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 16:03:58 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:58 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:03:58 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x63, 0x0, 0x6, 0x4}, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) [ 856.954165] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 856.955312] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 856.956338] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 856.958208] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 856.959328] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 856.960762] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 856.963070] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 856.964824] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 858.165775] Bluetooth: hci0: command 0x0c1a tx timeout [ 858.995685] Bluetooth: hci7: command 0x0c1a tx timeout [ 858.995721] Bluetooth: hci6: command 0x0c1a tx timeout [ 858.995761] Bluetooth: hci4: command 0x0c1a tx timeout [ 858.996913] Bluetooth: hci5: command 0x0c1a tx timeout [ 858.997347] Bluetooth: hci3: command 0x0c1a tx timeout [ 858.998357] Bluetooth: hci2: command 0x0c1a tx timeout [ 858.998765] Bluetooth: hci1: command 0x0c1a tx timeout 16:04:06 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:06 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1, 0x63, 0x0, 0x6, 0x4}, 0x7) 16:04:06 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:06 executing program 7: openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) 16:04:06 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r3, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:04:06 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) 16:04:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:04:06 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:06 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:06 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) 16:04:06 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:06 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) 16:04:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:04:06 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) 16:04:06 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:06 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x0, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:06 executing program 3: openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) [ 865.154726] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 865.156221] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 865.158257] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 865.159693] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 865.161485] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 865.163357] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 865.165244] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 865.167067] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 866.357687] Bluetooth: hci0: command 0x0c1a tx timeout [ 867.187782] Bluetooth: hci7: command 0x0c1a tx timeout [ 867.187808] Bluetooth: hci6: command 0x0c1a tx timeout [ 867.188823] Bluetooth: hci4: command 0x0c1a tx timeout [ 867.189267] Bluetooth: hci5: command 0x0c1a tx timeout [ 867.190240] Bluetooth: hci3: command 0x0c1a tx timeout [ 867.190643] Bluetooth: hci2: command 0x0c1a tx timeout [ 867.191536] Bluetooth: hci1: command 0x0c1a tx timeout 16:04:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:04:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:04:15 executing program 3: openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:04:15 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x0, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:15 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x10, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:15 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:15 executing program 7: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) 16:04:15 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) 16:04:15 executing program 7: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) 16:04:15 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:15 executing program 7: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) 16:04:15 executing program 3: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:15 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x0, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:15 executing program 7: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) 16:04:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:04:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:04:15 executing program 7: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) 16:04:15 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:15 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x0, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 874.632752] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 874.633401] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 874.634182] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 874.634855] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 874.635468] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 874.636134] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 874.637801] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 874.638410] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 875.827734] Bluetooth: hci0: command 0x0c1a tx timeout [ 876.659815] Bluetooth: hci7: command 0x0c1a tx timeout [ 876.659920] Bluetooth: hci6: command 0x0c1a tx timeout [ 876.660872] Bluetooth: hci4: command 0x0c1a tx timeout [ 876.661661] Bluetooth: hci5: command 0x0c1a tx timeout [ 876.662840] Bluetooth: hci3: command 0x0c1a tx timeout [ 876.663332] Bluetooth: hci2: command 0x0c1a tx timeout [ 876.664251] Bluetooth: hci1: command 0x0c1a tx timeout 16:04:24 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:24 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) 16:04:24 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:24 executing program 5: syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:24 executing program 7: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) 16:04:24 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x0, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:04:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:04:25 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:25 executing program 7: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) 16:04:25 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x0, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:25 executing program 5: syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:04:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:04:25 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:25 executing program 7: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) [ 883.972907] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 883.974429] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 883.976900] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 883.978339] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 883.979905] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 883.981263] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 883.983050] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 883.984408] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 885.171719] Bluetooth: hci0: command 0x0c1a tx timeout [ 886.003749] Bluetooth: hci7: command 0x0c1a tx timeout [ 886.004906] Bluetooth: hci6: command 0x0c1a tx timeout [ 886.004978] Bluetooth: hci4: command 0x0c1a tx timeout [ 886.005927] Bluetooth: hci5: command 0x0c1a tx timeout [ 886.006842] Bluetooth: hci3: command 0x0c1a tx timeout [ 886.007747] Bluetooth: hci2: command 0x0c1a tx timeout [ 886.008649] Bluetooth: hci1: command 0x0c1a tx timeout 16:04:35 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:35 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:35 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) 16:04:35 executing program 7: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) 16:04:35 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:35 executing program 5: syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_io_uring_setup(0x1a6b, 0x0, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:04:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:04:35 executing program 7: socket(0x1f, 0x0, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) 16:04:35 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) 16:04:35 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:35 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:04:35 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) 16:04:35 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) [ 894.215864] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 894.217149] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 894.218924] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 894.220161] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 894.221762] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 894.223113] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 894.224318] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 894.225634] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 895.411728] Bluetooth: hci0: command 0x0c1a tx timeout [ 896.244615] Bluetooth: hci7: command 0x0c1a tx timeout [ 896.245098] Bluetooth: hci6: command 0x0c1a tx timeout [ 896.245512] Bluetooth: hci4: command 0x0c1a tx timeout [ 896.245991] Bluetooth: hci5: command 0x0c1a tx timeout [ 896.246483] Bluetooth: hci3: command 0x0c1a tx timeout [ 896.247047] Bluetooth: hci2: command 0x0c1a tx timeout [ 896.247088] Bluetooth: hci1: command 0x0c1a tx timeout 16:04:45 executing program 6: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket(0x1f, 0x0, 0x7) r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8840}, 0x4044014) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:45 executing program 7: socket(0x1f, 0x0, 0x7) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101400, 0x0) 16:04:45 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0), 0x101400, 0x0) 16:04:45 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f0000000680)) 16:04:45 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x0, 0x0, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90c400e03193b7b1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3e}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x5) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r4, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x386dd4b118cd0f6b}, 0x8804) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r1, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x74}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x43}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1e9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8010) 16:04:45 executing program 5: r0 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0xa4, 0x0, r0}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) 16:04:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x40004000) r1 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) 16:04:45 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x7, @mcast2, @ipv4={'\x00', '\xff\xff', @dev}, 0x7800, 0x700, 0x1ff, 0x5}}) socket(0x1f, 0x4, 0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', r0, 0x0, 0x6d, 0x0, 0x8, 0x40, @dev, @dev, 0x0, 0x28}}) r1 = syz_io_uring_setup(0x36aa, &(0x7f00000005c0)={0x0, 0xb6cd, 0x2, 0x2, 0xaf}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x1a6b, &(0x7f0000000a00)={0x0, 0x7fd5, 0x2, 0x1, 0xa4, 0x0, r1}, &(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000a80), &(0x7f0000000ac0)) VM DIAGNOSIS: 16:09:50 Registers: info registers vcpu 0 RAX=0000000000000002 RBX=0000000000000002 RCX=dffffc0000000000 RDX=0000000000000002 RSI=0000000000000004 RDI=ffff88801649aac4 RBP=ffffed1002c9355b RSP=ffff8880398f7978 R8 =0000000000000000 R9 =ffffed1002c93558 R10=ffff88801649aac7 R11=1ffff1100d9c6f7b R12=ffff88801649b3d0 R13=ffff88801649aa00 R14=ffffed1002c9367a R15=ffff88801649aac4 RIP=ffffffff81467503 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555592b80400 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe7898afc8 CR3=000000000d9fc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffed100d9c6dd8 RBX=ffffed100d9c6dd9 RCX=ffffffff84bdec0e RDX=ffffed100d9c6dd9 RSI=0000000000000004 RDI=ffff88806ce36ec0 RBP=ffffed100d9c6dd8 RSP=ffff88800f4977b8 R8 =0000000000000000 R9 =ffffed100d9c6dd8 R10=ffff88806ce36ec3 R11=0000000000000001 R12=1ffff11001e92efc R13=0000000000000003 R14=ffffed100d9c6dd8 R15=ffff88800f497810 RIP=ffffffff81aff0b1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f214199f410 CR3=000000003a147000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000