Warning: Permanently added '[localhost]:43009' (ECDSA) to the list of known hosts.
2022/10/02 01:35:37 fuzzer started
2022/10/02 01:35:37 dialing manager at localhost:35095
syzkaller login: [   41.124916] cgroup: Unknown subsys name 'net'
[   41.211153] cgroup: Unknown subsys name 'rlimit'
2022/10/02 01:35:53 syscalls: 210
2022/10/02 01:35:53 code coverage: enabled
2022/10/02 01:35:53 comparison tracing: enabled
2022/10/02 01:35:53 extra coverage: enabled
2022/10/02 01:35:53 setuid sandbox: enabled
2022/10/02 01:35:53 namespace sandbox: enabled
2022/10/02 01:35:53 Android sandbox: enabled
2022/10/02 01:35:53 fault injection: enabled
2022/10/02 01:35:53 leak checking: enabled
2022/10/02 01:35:53 net packet injection: enabled
2022/10/02 01:35:53 net device setup: enabled
2022/10/02 01:35:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/10/02 01:35:53 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/10/02 01:35:53 USB emulation: enabled
2022/10/02 01:35:53 hci packet injection: enabled
2022/10/02 01:35:53 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930                                          )
2022/10/02 01:35:53 802.15.4 emulation: enabled
2022/10/02 01:35:53 fetching corpus: 0, signal 0/0 (executing program)
2022/10/02 01:35:54 starting 8 fuzzer processes
01:35:54 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0x8)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x7f, 0x6, 0xfe13}]}, 0x10)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000100))
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x4c000)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0)
write$rfkill(r2, &(0x7f00000002c0)={0x7, 0x7, 0x2, 0x0, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
pipe2(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000380))
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r5=>0x0, 0x4, 0x54, 0x9, 0x1, 0x10, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8000, 0x4}})
bind$bt_sco(r3, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
write$rfkill(r4, &(0x7f00000004c0)={0x81, 0x9, 0x2}, 0x8)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309)
openat$cgroup(r4, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6tnl0\x00', r5, 0x4, 0xee, 0xc9, 0x1ff, 0x1f, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x20, 0x9, 0xaf4}})
syz_genetlink_get_family_id$gtp(&(0x7f0000000600), r3)
socket$nl_audit(0x10, 0x3, 0x9)

01:35:54 executing program 0:
r0 = msgget(0x3, 0x200)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/131)
r1 = msgget(0x2, 0x20)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget(0x0, 0x40)
msgsnd(0x0, &(0x7f00000000c0)={0x2, "4c91b35078cd706ab1eee712540880a3b2dfebc82e1113b00378a8a80859b6b35eb2621be109c432d6f19d6bcc900ff5504932b74ab6d0f1ae0a57345f9bab0cb363e91b45aee5091491a0e3c358665510bf89624320f541081375ddc3100bee7b76f17649587e746e3d0d18a1470681176131300388072805b30e9182d74a6b6ce754d36b21a17fd99055bd9d9d5c91cfd7ae8633812d19a0a02edec3d208af108ab1139e89835cc685d4"}, 0xb3, 0x0)
msgrcv(r2, &(0x7f0000000180)={0x0, ""/243}, 0xfb, 0x1, 0x2000)
msgget(0x3, 0x3c1)
r3 = msgget(0x0, 0x2)
msgrcv(r3, &(0x7f0000000280)={0x0, ""/143}, 0x97, 0x0, 0x2000)
msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000340)=""/249)
r4 = msgget(0x1, 0x482)
msgrcv(r4, &(0x7f0000000440)={0x0, ""/251}, 0x103, 0x3, 0x45e8b220aa47918d)
r5 = msgget(0x3, 0x3dc)
msgget(0x3, 0x600)
add_key(&(0x7f0000000580)='trusted\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="8debbf3dde5e72d6f12170cf3fa5ed641cc3a1b1e57c7d1183b6f10dfe255ca14211409cddcc8e62e6dfcab86198", 0x2e, 0xffffffffffffffff)
r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
msgctl$IPC_RMID(r5, 0x0)
msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000640)=""/131)

01:35:54 executing program 2:
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2d4, 0x12, 0x100, 0x70bd29, 0x25dfdbff, {0x25, 0x80, 0x2e, 0x4, {0x4e23, 0x4e21, [0x2a8, 0x2, 0xda1f, 0x2], [0x9, 0x1, 0x9, 0x4], 0x0, [0x7475, 0x4]}, 0xfffffff7, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x96, 0x1, "7301d28460a76c8cdeb683501fa4688fbfc730a0f1c5dcbadc10f8bcb8ef168d044ee9537d107b29ca455c05c52e98b7e90abe84c0d754849412cdcd56e73c37b5200fb16ae4c4810077f9e9426aa460b7baa29c2ac904ec42603c1779a12b6341b1270b2cdadc20e5ffc24e9817b7a24a407feff52079d1dbe16c9c1442e0a7660feb1a9eaafe5f5cfe606c7649a5c12d21"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "a5370170de9779a2cb187718f31ae0bcd5937772c88528f1eac519fec8706cc38244d546a2556b3b0f5f8eca302c18ef7cc0448431201f1287fdb1791db9aa1f8090e7d8e62eb5098ea88cbb42afc70cc021e15bea400bca56874cd0836f02f3a39004cc9dcc9c78515d4f"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "f6d621224588038afe5585a8a9899a6a6760fc7ee39c026993a8398ada7c37652c4ab4430c08812df70c7b07c43cac256fae94f3971e64590966915da692a75f8cbbbbe55aabbd69f026ee6c2372b7672506e0b9fc93ac461473f27704608cad777b906ba368462aa63bd8bb4c208130eedb111191c972ab5b741c3072e81adf8d118e35aa5430496adc147ddc1625e44096201a2dcdb71c01b1d2e1fe7f3a9868a30a2dfbc3a40b6e4ce9c419402be3fe2ac268acfb311f792c618c675be9060534d774acadbdb89938d1f834a5eb7b8abc76b919"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "4315ba3bcf2e121c28226f4b0b79d0ee6365a6f521fca5f7ec00ab81df037e6a83119e618fbce57f1c2be9324b99e238fcafe525ced034300cd1ff34293863025ceb9b54e4c11590ea3cf8b89c879cf936dbb3ea76fc80c878a7ef56bb34e640b9d5d798d4b33b530c7358f737d451ada60d88f4772bb338aa40ed1ebe3b748695d9b0516dea762584228c527377b564b854bf3c9ca633338081316d9514"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4048001}, 0x48000)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', <r1=>0x0, 0x2f, 0x7f, 0x5, 0x800, 0x22, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x700, 0x1, 0x8aec, 0x80}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000500)=""/229, &(0x7f0000000600)=0xe5)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000006c0)={&(0x7f0000000680)="42dea9fde8730c58586a09847145de08046aafbcc97a29d880d920a9eba95487c74b6d92145eeb4e", 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x28000)
msgget(0x3, 0x80)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'sit0\x00', <r4=>r1, 0x4, 0x40, 0xff, 0x6e, 0x80, @private0, @private0, 0x737, 0x80, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'syztnl1\x00', <r5=>r4, 0x4, 0x2, 0x80, 0x9, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x20, 0x2, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl1\x00', r5, 0x29, 0x0, 0x80, 0x1, 0x0, @remote, @mcast2, 0x40, 0x7, 0xbca, 0x6}})
ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000980)={0x4, 0x21, "e9afd31e2fdfbf924ae149d654bfb64e95c82e5b915545770d90a14b637aa481bd"})
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc}]}, 0x38}}, 0x10)
pipe2(&(0x7f0000000b00)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x85800)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x0, 0x2, 0x72, 0x1, 0x1, @remote, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x80, 0x700, 0x2}})
r9 = clone3(&(0x7f0000000f40)={0x9001000, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0), {0x7}, &(0x7f0000000d00)=""/204, 0xcc, &(0x7f0000000e00)=""/253, &(0x7f0000000f00)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r8}}, 0x58)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000800)
sendto$packet(r7, &(0x7f00000010c0)="64629d6c122945b500338052a018c3512615bc7a7755bb6f524d69f4f633d68452a4ccfcc71032c5319ecd88b4d413a9b513ff41e9d267596b462ffeb53945a16e58c0a3d95283522e969dfab0cbb06b899439bd03902ed9b5a0407e93051eeac26de1c357984966ee314d0e38e94d5ec8896c0165a50ed80dd5ddaabfc06d5ee0be1a3a1f31de23f9", 0x89, 0xc0, &(0x7f0000001180)={0x11, 0xf7, r5, 0x1, 0x1}, 0x14)

01:35:54 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x17}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
ioctl$SNAPSHOT_S2RAM(r3, 0x330b)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000084)
ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000340))
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x40814)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000480)=0x2, 0x4)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000004c0))
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000500)={0x9, 0x7})
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000540))
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000580))
r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f00000005c0))
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x44081)

01:35:54 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000050)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4050)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x44d}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044094)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', <r2=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004894}, 0x4041041)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'sit0\x00', <r4=>0x0, 0x4, 0x3, 0x7f, 0x6, 0x46, @private0, @mcast1, 0x40, 0x8000, 0x0, 0x6}})
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40c4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan3\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r6, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl2\x00', <r8=>r4, 0x4, 0x1, 0x3, 0x3f, 0x8, @local, @empty, 0x7800, 0x80, 0x1, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'syztnl0\x00', r8, 0x29, 0x2, 0xbe, 0x755ba5c2, 0x40, @loopback, @empty, 0x40, 0x8000, 0x7, 0x4}})
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40820000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x64}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x1091f6e8134af7f5}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xe2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000091}, 0x4010)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r5)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1008090}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r9, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x1)

01:35:54 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket(0x2, 0x80000, 0x101)
pipe2(&(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf41}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8010}, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_DELPDP(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x40080)
pipe2(&(0x7f0000000400)={<r7=>0xffffffffffffffff}, 0x4000)
getsockopt$bt_sco_SCO_CONNINFO(r7, 0x11, 0x2, &(0x7f0000000440)=""/255, &(0x7f0000000540)=0xff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan4\x00', <r10=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x408004}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r8)
sendmsg$IEEE802154_LIST_PHY(r11, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r12, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x6)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)

01:35:54 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/202)
r0 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/143)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
r1 = shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil)
r2 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
r3 = getgid()
shmctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r3, 0x0, 0xffffffffffffffff, 0x13d, 0x7}, 0x101, 0x7, 0x6, 0x0, 0x0, 0x0, 0x8})
getgid()
shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000001)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000380))
getrusage(0x0, &(0x7f00000003c0))
r4 = shmget(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil)
shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000480)=""/114)
shmget(0x2, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil)
msgget$private(0x0, 0x1a8)
shmctl$IPC_RMID(r2, 0x0)

01:35:54 executing program 6:
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x1, 0x1, 0x0, 0x1}, 0x8)
write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4, 0x0, 0x0, 0x1}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r0=>0x0, 0x2f, 0x4, 0x0, 0xffff, 0x42, @dev={0xfe, 0x80, '\x00', 0xe}, @local, 0x700, 0x8, 0x472, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r1=>r0, 0x4, 0x2, 0x2, 0x180, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0xfffffffa, 0xad}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', r1, 0x4, 0x80, 0x5, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8, 0x3f, 0x8}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', <r5=>r4, 0x2f, 0x8, 0x81, 0x8, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20, 0x5587af27e26f0b5, 0xffffffff, 0xfffffff8}})
add_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="744a01aae0d9fe10ee8b83ad4bf1b466b86397a457cc521dcb90ae252be39c044276e2e20d97dee29bcb405d2bf95c23937aa63f6c32a63d9d29dd27c51ba6bf5f028f4aad937be9dc068a0626a9ca9215cfce2c4232130e8d1bb023de0a056a7d422007f276cf358ac5e6fcadb1ece7327851af4ed9a49af6ce5b597de918a819af56d4a8c788f6be7f49d25aad9bde05a0c645d79c63726a524d149b9bb4e9d040200bfca670704befd5cf29fbf035e87c0573baa357db861473f63ee69305dc9e16bf11de02a2022429af5e262106a0", 0xd1, 0xfffffffffffffffd)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl2\x00', r5, 0x29, 0x8, 0x7, 0x3ff, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8, 0x70f, 0x6, 0x4}})
r7 = accept4$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14, 0x800)
getpeername$packet(r7, &(0x7f00000006c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14)
bind$packet(r7, &(0x7f0000000740)={0x11, 0x17, r8, 0x1, 0x9, 0x6, @random="728697b1a5c2"}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'sit0\x00', r8, 0x29, 0x40, 0x9, 0x7, 0x40, @private1, @loopback, 0x1, 0x40, 0x8, 0x8001}})
pipe2(&(0x7f0000000840)={<r9=>0xffffffffffffffff}, 0x0)
write$rfkill(r9, &(0x7f0000000880)={0x8, 0x0, 0x2, 0x0, 0x1}, 0x8)
socket$inet6_udplite(0xa, 0x2, 0x88)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r10, 0x89fa, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x2, 0x7, 0x0, @private0, @mcast1, 0x0, 0x20, 0x8, 0x20}})

[   57.061353] audit: type=1400 audit(1664674554.220:6): avc:  denied  { execmem } for  pid=286 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   58.205782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.207410] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.209882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.213419] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.215687] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   58.217415] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.223043] Bluetooth: hci0: HCI_REQ-0x0c1a
[   58.332103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.336771] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   58.342203] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   58.343255] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.344922] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.346372] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   58.365684] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   58.366930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.369907] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   58.380755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.382070] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   58.383755] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   58.385072] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   58.386931] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.388117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   58.389213] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   58.390213] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   58.391716] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.392683] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   58.393733] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   58.394725] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   58.398802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   58.399859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.401000] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   58.402868] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   58.404165] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   58.405368] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   58.406320] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   58.407797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   58.409123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.410129] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   58.411175] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   58.418892] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   58.423980] Bluetooth: hci3: HCI_REQ-0x0c1a
[   58.425273] Bluetooth: hci6: HCI_REQ-0x0c1a
[   58.430491] Bluetooth: hci1: HCI_REQ-0x0c1a
[   58.434088] Bluetooth: hci5: HCI_REQ-0x0c1a
[   58.436979] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   58.438906] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   58.439959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.449514] Bluetooth: hci4: HCI_REQ-0x0c1a
[   58.474443] Bluetooth: hci2: HCI_REQ-0x0c1a
[   60.293666] Bluetooth: hci0: command 0x0409 tx timeout
[   60.421396] Bluetooth: hci7: Opcode 0x c03 failed: -110
[   60.484462] Bluetooth: hci4: command 0x0409 tx timeout
[   60.484529] Bluetooth: hci3: command 0x0409 tx timeout
[   60.485231] Bluetooth: hci5: command 0x0409 tx timeout
[   60.485709] Bluetooth: hci1: command 0x0409 tx timeout
[   60.486277] Bluetooth: hci6: command 0x0409 tx timeout
[   60.548729] Bluetooth: hci2: command 0x0409 tx timeout
[   62.340396] Bluetooth: hci0: command 0x041b tx timeout
[   62.532494] Bluetooth: hci6: command 0x041b tx timeout
[   62.532949] Bluetooth: hci3: command 0x041b tx timeout
[   62.533404] Bluetooth: hci1: command 0x041b tx timeout
[   62.533813] Bluetooth: hci4: command 0x041b tx timeout
[   62.534213] Bluetooth: hci5: command 0x041b tx timeout
[   62.596383] Bluetooth: hci2: command 0x041b tx timeout
[   64.388424] Bluetooth: hci0: command 0x040f tx timeout
[   64.580408] Bluetooth: hci5: command 0x040f tx timeout
[   64.580453] Bluetooth: hci4: command 0x040f tx timeout
[   64.581243] Bluetooth: hci1: command 0x040f tx timeout
[   64.581668] Bluetooth: hci3: command 0x040f tx timeout
[   64.581687] Bluetooth: hci6: command 0x040f tx timeout
[   64.644442] Bluetooth: hci2: command 0x040f tx timeout
[   64.964508] Bluetooth: hci7: Opcode 0x c03 failed: -110
[   66.436401] Bluetooth: hci0: command 0x0419 tx timeout
[   66.628444] Bluetooth: hci1: command 0x0419 tx timeout
[   66.628538] Bluetooth: hci6: command 0x0419 tx timeout
[   66.628938] Bluetooth: hci3: command 0x0419 tx timeout
[   66.629374] Bluetooth: hci4: command 0x0419 tx timeout
[   66.629771] Bluetooth: hci5: command 0x0419 tx timeout
[   66.692385] Bluetooth: hci2: command 0x0419 tx timeout
[   67.344579] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   67.356984] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   67.357942] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   67.366910] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   67.370004] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   67.371160] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   67.389384] Bluetooth: hci7: HCI_REQ-0x0c1a
[   69.445397] Bluetooth: hci7: command 0x0409 tx timeout
[   71.493396] Bluetooth: hci7: command 0x041b tx timeout
[   73.540472] Bluetooth: hci7: command 0x040f tx timeout
[   75.588504] Bluetooth: hci7: command 0x0419 tx timeout
01:36:47 executing program 6:
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x1, 0x1, 0x0, 0x1}, 0x8)
write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4, 0x0, 0x0, 0x1}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r0=>0x0, 0x2f, 0x4, 0x0, 0xffff, 0x42, @dev={0xfe, 0x80, '\x00', 0xe}, @local, 0x700, 0x8, 0x472, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r1=>r0, 0x4, 0x2, 0x2, 0x180, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0xfffffffa, 0xad}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', r1, 0x4, 0x80, 0x5, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8, 0x3f, 0x8}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', <r5=>r4, 0x2f, 0x8, 0x81, 0x8, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20, 0x5587af27e26f0b5, 0xffffffff, 0xfffffff8}})
add_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="744a01aae0d9fe10ee8b83ad4bf1b466b86397a457cc521dcb90ae252be39c044276e2e20d97dee29bcb405d2bf95c23937aa63f6c32a63d9d29dd27c51ba6bf5f028f4aad937be9dc068a0626a9ca9215cfce2c4232130e8d1bb023de0a056a7d422007f276cf358ac5e6fcadb1ece7327851af4ed9a49af6ce5b597de918a819af56d4a8c788f6be7f49d25aad9bde05a0c645d79c63726a524d149b9bb4e9d040200bfca670704befd5cf29fbf035e87c0573baa357db861473f63ee69305dc9e16bf11de02a2022429af5e262106a0", 0xd1, 0xfffffffffffffffd)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl2\x00', r5, 0x29, 0x8, 0x7, 0x3ff, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8, 0x70f, 0x6, 0x4}})
r7 = accept4$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14, 0x800)
getpeername$packet(r7, &(0x7f00000006c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14)
bind$packet(r7, &(0x7f0000000740)={0x11, 0x17, r8, 0x1, 0x9, 0x6, @random="728697b1a5c2"}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'sit0\x00', r8, 0x29, 0x40, 0x9, 0x7, 0x40, @private1, @loopback, 0x1, 0x40, 0x8, 0x8001}})
pipe2(&(0x7f0000000840)={<r9=>0xffffffffffffffff}, 0x0)
write$rfkill(r9, &(0x7f0000000880)={0x8, 0x0, 0x2, 0x0, 0x1}, 0x8)
socket$inet6_udplite(0xa, 0x2, 0x88)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r10, 0x89fa, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x2, 0x7, 0x0, @private0, @mcast1, 0x0, 0x20, 0x8, 0x20}})

01:36:47 executing program 6:
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x1, 0x1, 0x0, 0x1}, 0x8)
write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4, 0x0, 0x0, 0x1}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r0=>0x0, 0x2f, 0x4, 0x0, 0xffff, 0x42, @dev={0xfe, 0x80, '\x00', 0xe}, @local, 0x700, 0x8, 0x472, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r1=>r0, 0x4, 0x2, 0x2, 0x180, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0xfffffffa, 0xad}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', r1, 0x4, 0x80, 0x5, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8, 0x3f, 0x8}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', <r5=>r4, 0x2f, 0x8, 0x81, 0x8, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20, 0x5587af27e26f0b5, 0xffffffff, 0xfffffff8}})
add_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="744a01aae0d9fe10ee8b83ad4bf1b466b86397a457cc521dcb90ae252be39c044276e2e20d97dee29bcb405d2bf95c23937aa63f6c32a63d9d29dd27c51ba6bf5f028f4aad937be9dc068a0626a9ca9215cfce2c4232130e8d1bb023de0a056a7d422007f276cf358ac5e6fcadb1ece7327851af4ed9a49af6ce5b597de918a819af56d4a8c788f6be7f49d25aad9bde05a0c645d79c63726a524d149b9bb4e9d040200bfca670704befd5cf29fbf035e87c0573baa357db861473f63ee69305dc9e16bf11de02a2022429af5e262106a0", 0xd1, 0xfffffffffffffffd)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl2\x00', r5, 0x29, 0x8, 0x7, 0x3ff, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8, 0x70f, 0x6, 0x4}})
r7 = accept4$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14, 0x800)
getpeername$packet(r7, &(0x7f00000006c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14)
bind$packet(r7, &(0x7f0000000740)={0x11, 0x17, r8, 0x1, 0x9, 0x6, @random="728697b1a5c2"}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'sit0\x00', r8, 0x29, 0x40, 0x9, 0x7, 0x40, @private1, @loopback, 0x1, 0x40, 0x8, 0x8001}})
pipe2(&(0x7f0000000840)={<r9=>0xffffffffffffffff}, 0x0)
write$rfkill(r9, &(0x7f0000000880)={0x8, 0x0, 0x2, 0x0, 0x1}, 0x8)
socket$inet6_udplite(0xa, 0x2, 0x88)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r10, 0x89fa, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x2, 0x7, 0x0, @private0, @mcast1, 0x0, 0x20, 0x8, 0x20}})

01:36:48 executing program 6:
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x1, 0x1, 0x0, 0x1}, 0x8)
write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4, 0x0, 0x0, 0x1}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r0=>0x0, 0x2f, 0x4, 0x0, 0xffff, 0x42, @dev={0xfe, 0x80, '\x00', 0xe}, @local, 0x700, 0x8, 0x472, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r1=>r0, 0x4, 0x2, 0x2, 0x180, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0xfffffffa, 0xad}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', r1, 0x4, 0x80, 0x5, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8, 0x3f, 0x8}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', <r5=>r4, 0x2f, 0x8, 0x81, 0x8, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20, 0x5587af27e26f0b5, 0xffffffff, 0xfffffff8}})
add_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="744a01aae0d9fe10ee8b83ad4bf1b466b86397a457cc521dcb90ae252be39c044276e2e20d97dee29bcb405d2bf95c23937aa63f6c32a63d9d29dd27c51ba6bf5f028f4aad937be9dc068a0626a9ca9215cfce2c4232130e8d1bb023de0a056a7d422007f276cf358ac5e6fcadb1ece7327851af4ed9a49af6ce5b597de918a819af56d4a8c788f6be7f49d25aad9bde05a0c645d79c63726a524d149b9bb4e9d040200bfca670704befd5cf29fbf035e87c0573baa357db861473f63ee69305dc9e16bf11de02a2022429af5e262106a0", 0xd1, 0xfffffffffffffffd)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl2\x00', r5, 0x29, 0x8, 0x7, 0x3ff, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8, 0x70f, 0x6, 0x4}})
r7 = accept4$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14, 0x800)
getpeername$packet(r7, &(0x7f00000006c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14)
bind$packet(r7, &(0x7f0000000740)={0x11, 0x17, r8, 0x1, 0x9, 0x6, @random="728697b1a5c2"}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'sit0\x00', r8, 0x29, 0x40, 0x9, 0x7, 0x40, @private1, @loopback, 0x1, 0x40, 0x8, 0x8001}})
pipe2(&(0x7f0000000840)={<r9=>0xffffffffffffffff}, 0x0)
write$rfkill(r9, &(0x7f0000000880)={0x8, 0x0, 0x2, 0x0, 0x1}, 0x8)
socket$inet6_udplite(0xa, 0x2, 0x88)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r10, 0x89fa, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x2, 0x7, 0x0, @private0, @mcast1, 0x0, 0x20, 0x8, 0x20}})

01:36:48 executing program 2:
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2d4, 0x12, 0x100, 0x70bd29, 0x25dfdbff, {0x25, 0x80, 0x2e, 0x4, {0x4e23, 0x4e21, [0x2a8, 0x2, 0xda1f, 0x2], [0x9, 0x1, 0x9, 0x4], 0x0, [0x7475, 0x4]}, 0xfffffff7, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x96, 0x1, "7301d28460a76c8cdeb683501fa4688fbfc730a0f1c5dcbadc10f8bcb8ef168d044ee9537d107b29ca455c05c52e98b7e90abe84c0d754849412cdcd56e73c37b5200fb16ae4c4810077f9e9426aa460b7baa29c2ac904ec42603c1779a12b6341b1270b2cdadc20e5ffc24e9817b7a24a407feff52079d1dbe16c9c1442e0a7660feb1a9eaafe5f5cfe606c7649a5c12d21"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "a5370170de9779a2cb187718f31ae0bcd5937772c88528f1eac519fec8706cc38244d546a2556b3b0f5f8eca302c18ef7cc0448431201f1287fdb1791db9aa1f8090e7d8e62eb5098ea88cbb42afc70cc021e15bea400bca56874cd0836f02f3a39004cc9dcc9c78515d4f"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "f6d621224588038afe5585a8a9899a6a6760fc7ee39c026993a8398ada7c37652c4ab4430c08812df70c7b07c43cac256fae94f3971e64590966915da692a75f8cbbbbe55aabbd69f026ee6c2372b7672506e0b9fc93ac461473f27704608cad777b906ba368462aa63bd8bb4c208130eedb111191c972ab5b741c3072e81adf8d118e35aa5430496adc147ddc1625e44096201a2dcdb71c01b1d2e1fe7f3a9868a30a2dfbc3a40b6e4ce9c419402be3fe2ac268acfb311f792c618c675be9060534d774acadbdb89938d1f834a5eb7b8abc76b919"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "4315ba3bcf2e121c28226f4b0b79d0ee6365a6f521fca5f7ec00ab81df037e6a83119e618fbce57f1c2be9324b99e238fcafe525ced034300cd1ff34293863025ceb9b54e4c11590ea3cf8b89c879cf936dbb3ea76fc80c878a7ef56bb34e640b9d5d798d4b33b530c7358f737d451ada60d88f4772bb338aa40ed1ebe3b748695d9b0516dea762584228c527377b564b854bf3c9ca633338081316d9514"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4048001}, 0x48000)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', <r1=>0x0, 0x2f, 0x7f, 0x5, 0x800, 0x22, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x700, 0x1, 0x8aec, 0x80}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000500)=""/229, &(0x7f0000000600)=0xe5)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000006c0)={&(0x7f0000000680)="42dea9fde8730c58586a09847145de08046aafbcc97a29d880d920a9eba95487c74b6d92145eeb4e", 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x28000)
msgget(0x3, 0x80)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'sit0\x00', <r4=>r1, 0x4, 0x40, 0xff, 0x6e, 0x80, @private0, @private0, 0x737, 0x80, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'syztnl1\x00', <r5=>r4, 0x4, 0x2, 0x80, 0x9, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x20, 0x2, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl1\x00', r5, 0x29, 0x0, 0x80, 0x1, 0x0, @remote, @mcast2, 0x40, 0x7, 0xbca, 0x6}})
ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000980)={0x4, 0x21, "e9afd31e2fdfbf924ae149d654bfb64e95c82e5b915545770d90a14b637aa481bd"})
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc}]}, 0x38}}, 0x10)
pipe2(&(0x7f0000000b00)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x85800)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x0, 0x2, 0x72, 0x1, 0x1, @remote, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x80, 0x700, 0x2}})
r9 = clone3(&(0x7f0000000f40)={0x9001000, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0), {0x7}, &(0x7f0000000d00)=""/204, 0xcc, &(0x7f0000000e00)=""/253, &(0x7f0000000f00)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r8}}, 0x58)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000800)
sendto$packet(r7, &(0x7f00000010c0)="64629d6c122945b500338052a018c3512615bc7a7755bb6f524d69f4f633d68452a4ccfcc71032c5319ecd88b4d413a9b513ff41e9d267596b462ffeb53945a16e58c0a3d95283522e969dfab0cbb06b899439bd03902ed9b5a0407e93051eeac26de1c357984966ee314d0e38e94d5ec8896c0165a50ed80dd5ddaabfc06d5ee0be1a3a1f31de23f9", 0x89, 0xc0, &(0x7f0000001180)={0x11, 0xf7, r5, 0x1, 0x1}, 0x14)

01:36:48 executing program 6:
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x1, 0x1, 0x0, 0x1}, 0x8)
write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4, 0x0, 0x0, 0x1}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r0=>0x0, 0x2f, 0x4, 0x0, 0xffff, 0x42, @dev={0xfe, 0x80, '\x00', 0xe}, @local, 0x700, 0x8, 0x472, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r1=>r0, 0x4, 0x2, 0x2, 0x180, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0xfffffffa, 0xad}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', r1, 0x4, 0x80, 0x5, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8, 0x3f, 0x8}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', <r5=>r4, 0x2f, 0x8, 0x81, 0x8, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20, 0x5587af27e26f0b5, 0xffffffff, 0xfffffff8}})
add_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="744a01aae0d9fe10ee8b83ad4bf1b466b86397a457cc521dcb90ae252be39c044276e2e20d97dee29bcb405d2bf95c23937aa63f6c32a63d9d29dd27c51ba6bf5f028f4aad937be9dc068a0626a9ca9215cfce2c4232130e8d1bb023de0a056a7d422007f276cf358ac5e6fcadb1ece7327851af4ed9a49af6ce5b597de918a819af56d4a8c788f6be7f49d25aad9bde05a0c645d79c63726a524d149b9bb4e9d040200bfca670704befd5cf29fbf035e87c0573baa357db861473f63ee69305dc9e16bf11de02a2022429af5e262106a0", 0xd1, 0xfffffffffffffffd)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl2\x00', r5, 0x29, 0x8, 0x7, 0x3ff, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8, 0x70f, 0x6, 0x4}})
r7 = accept4$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14, 0x800)
getpeername$packet(r7, &(0x7f00000006c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14)
bind$packet(r7, &(0x7f0000000740)={0x11, 0x17, r8, 0x1, 0x9, 0x6, @random="728697b1a5c2"}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'sit0\x00', r8, 0x29, 0x40, 0x9, 0x7, 0x40, @private1, @loopback, 0x1, 0x40, 0x8, 0x8001}})
pipe2(&(0x7f0000000840)={<r9=>0xffffffffffffffff}, 0x0)
write$rfkill(r9, &(0x7f0000000880)={0x8, 0x0, 0x2, 0x0, 0x1}, 0x8)
socket$inet6_udplite(0xa, 0x2, 0x88)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r10, 0x89fa, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x2, 0x7, 0x0, @private0, @mcast1, 0x0, 0x20, 0x8, 0x20}})

01:36:48 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket(0x2, 0x80000, 0x101)
pipe2(&(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf41}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8010}, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_DELPDP(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x40080)
pipe2(&(0x7f0000000400)={<r7=>0xffffffffffffffff}, 0x4000)
getsockopt$bt_sco_SCO_CONNINFO(r7, 0x11, 0x2, &(0x7f0000000440)=""/255, &(0x7f0000000540)=0xff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan4\x00', <r10=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x408004}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r8)
sendmsg$IEEE802154_LIST_PHY(r11, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r12, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x6)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)

01:36:49 executing program 2:
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2d4, 0x12, 0x100, 0x70bd29, 0x25dfdbff, {0x25, 0x80, 0x2e, 0x4, {0x4e23, 0x4e21, [0x2a8, 0x2, 0xda1f, 0x2], [0x9, 0x1, 0x9, 0x4], 0x0, [0x7475, 0x4]}, 0xfffffff7, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x96, 0x1, "7301d28460a76c8cdeb683501fa4688fbfc730a0f1c5dcbadc10f8bcb8ef168d044ee9537d107b29ca455c05c52e98b7e90abe84c0d754849412cdcd56e73c37b5200fb16ae4c4810077f9e9426aa460b7baa29c2ac904ec42603c1779a12b6341b1270b2cdadc20e5ffc24e9817b7a24a407feff52079d1dbe16c9c1442e0a7660feb1a9eaafe5f5cfe606c7649a5c12d21"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "a5370170de9779a2cb187718f31ae0bcd5937772c88528f1eac519fec8706cc38244d546a2556b3b0f5f8eca302c18ef7cc0448431201f1287fdb1791db9aa1f8090e7d8e62eb5098ea88cbb42afc70cc021e15bea400bca56874cd0836f02f3a39004cc9dcc9c78515d4f"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "f6d621224588038afe5585a8a9899a6a6760fc7ee39c026993a8398ada7c37652c4ab4430c08812df70c7b07c43cac256fae94f3971e64590966915da692a75f8cbbbbe55aabbd69f026ee6c2372b7672506e0b9fc93ac461473f27704608cad777b906ba368462aa63bd8bb4c208130eedb111191c972ab5b741c3072e81adf8d118e35aa5430496adc147ddc1625e44096201a2dcdb71c01b1d2e1fe7f3a9868a30a2dfbc3a40b6e4ce9c419402be3fe2ac268acfb311f792c618c675be9060534d774acadbdb89938d1f834a5eb7b8abc76b919"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "4315ba3bcf2e121c28226f4b0b79d0ee6365a6f521fca5f7ec00ab81df037e6a83119e618fbce57f1c2be9324b99e238fcafe525ced034300cd1ff34293863025ceb9b54e4c11590ea3cf8b89c879cf936dbb3ea76fc80c878a7ef56bb34e640b9d5d798d4b33b530c7358f737d451ada60d88f4772bb338aa40ed1ebe3b748695d9b0516dea762584228c527377b564b854bf3c9ca633338081316d9514"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4048001}, 0x48000)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', <r1=>0x0, 0x2f, 0x7f, 0x5, 0x800, 0x22, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x700, 0x1, 0x8aec, 0x80}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000500)=""/229, &(0x7f0000000600)=0xe5)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000006c0)={&(0x7f0000000680)="42dea9fde8730c58586a09847145de08046aafbcc97a29d880d920a9eba95487c74b6d92145eeb4e", 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x28000)
msgget(0x3, 0x80)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'sit0\x00', <r4=>r1, 0x4, 0x40, 0xff, 0x6e, 0x80, @private0, @private0, 0x737, 0x80, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'syztnl1\x00', <r5=>r4, 0x4, 0x2, 0x80, 0x9, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x20, 0x2, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl1\x00', r5, 0x29, 0x0, 0x80, 0x1, 0x0, @remote, @mcast2, 0x40, 0x7, 0xbca, 0x6}})
ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000980)={0x4, 0x21, "e9afd31e2fdfbf924ae149d654bfb64e95c82e5b915545770d90a14b637aa481bd"})
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc}]}, 0x38}}, 0x10)
pipe2(&(0x7f0000000b00)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x85800)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x0, 0x2, 0x72, 0x1, 0x1, @remote, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x80, 0x700, 0x2}})
r9 = clone3(&(0x7f0000000f40)={0x9001000, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0), {0x7}, &(0x7f0000000d00)=""/204, 0xcc, &(0x7f0000000e00)=""/253, &(0x7f0000000f00)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r8}}, 0x58)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000800)
sendto$packet(r7, &(0x7f00000010c0)="64629d6c122945b500338052a018c3512615bc7a7755bb6f524d69f4f633d68452a4ccfcc71032c5319ecd88b4d413a9b513ff41e9d267596b462ffeb53945a16e58c0a3d95283522e969dfab0cbb06b899439bd03902ed9b5a0407e93051eeac26de1c357984966ee314d0e38e94d5ec8896c0165a50ed80dd5ddaabfc06d5ee0be1a3a1f31de23f9", 0x89, 0xc0, &(0x7f0000001180)={0x11, 0xf7, r5, 0x1, 0x1}, 0x14)

01:36:49 executing program 6:
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x1, 0x1, 0x0, 0x1}, 0x8)
write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4, 0x0, 0x0, 0x1}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r0=>0x0, 0x2f, 0x4, 0x0, 0xffff, 0x42, @dev={0xfe, 0x80, '\x00', 0xe}, @local, 0x700, 0x8, 0x472, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r1=>r0, 0x4, 0x2, 0x2, 0x180, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0xfffffffa, 0xad}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', r1, 0x4, 0x80, 0x5, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8, 0x3f, 0x8}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', <r5=>r4, 0x2f, 0x8, 0x81, 0x8, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20, 0x5587af27e26f0b5, 0xffffffff, 0xfffffff8}})
add_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="744a01aae0d9fe10ee8b83ad4bf1b466b86397a457cc521dcb90ae252be39c044276e2e20d97dee29bcb405d2bf95c23937aa63f6c32a63d9d29dd27c51ba6bf5f028f4aad937be9dc068a0626a9ca9215cfce2c4232130e8d1bb023de0a056a7d422007f276cf358ac5e6fcadb1ece7327851af4ed9a49af6ce5b597de918a819af56d4a8c788f6be7f49d25aad9bde05a0c645d79c63726a524d149b9bb4e9d040200bfca670704befd5cf29fbf035e87c0573baa357db861473f63ee69305dc9e16bf11de02a2022429af5e262106a0", 0xd1, 0xfffffffffffffffd)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl2\x00', r5, 0x29, 0x8, 0x7, 0x3ff, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8, 0x70f, 0x6, 0x4}})
r7 = accept4$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14, 0x800)
getpeername$packet(r7, &(0x7f00000006c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14)
bind$packet(r7, &(0x7f0000000740)={0x11, 0x17, r8, 0x1, 0x9, 0x6, @random="728697b1a5c2"}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'sit0\x00', r8, 0x29, 0x40, 0x9, 0x7, 0x40, @private1, @loopback, 0x1, 0x40, 0x8, 0x8001}})
pipe2(&(0x7f0000000840)={<r9=>0xffffffffffffffff}, 0x0)
write$rfkill(r9, &(0x7f0000000880)={0x8, 0x0, 0x2, 0x0, 0x1}, 0x8)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_udplite(0xa, 0x2, 0x88)

01:37:08 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket(0x2, 0x80000, 0x101)
pipe2(&(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf41}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8010}, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_DELPDP(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x40080)
pipe2(&(0x7f0000000400)={<r7=>0xffffffffffffffff}, 0x4000)
getsockopt$bt_sco_SCO_CONNINFO(r7, 0x11, 0x2, &(0x7f0000000440)=""/255, &(0x7f0000000540)=0xff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan4\x00', <r10=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x408004}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r8)
sendmsg$IEEE802154_LIST_PHY(r11, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r12, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x6)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)

01:37:08 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000050)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4050)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x44d}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044094)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', <r2=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004894}, 0x4041041)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'sit0\x00', <r4=>0x0, 0x4, 0x3, 0x7f, 0x6, 0x46, @private0, @mcast1, 0x40, 0x8000, 0x0, 0x6}})
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40c4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan3\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r6, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl2\x00', <r8=>r4, 0x4, 0x1, 0x3, 0x3f, 0x8, @local, @empty, 0x7800, 0x80, 0x1, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'syztnl0\x00', r8, 0x29, 0x2, 0xbe, 0x755ba5c2, 0x40, @loopback, @empty, 0x40, 0x8000, 0x7, 0x4}})
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40820000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x64}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x1091f6e8134af7f5}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xe2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000091}, 0x4010)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r5)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1008090}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r9, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x1)

01:37:08 executing program 0:
r0 = msgget(0x3, 0x200)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/131)
r1 = msgget(0x2, 0x20)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget(0x0, 0x40)
msgsnd(0x0, &(0x7f00000000c0)={0x2, "4c91b35078cd706ab1eee712540880a3b2dfebc82e1113b00378a8a80859b6b35eb2621be109c432d6f19d6bcc900ff5504932b74ab6d0f1ae0a57345f9bab0cb363e91b45aee5091491a0e3c358665510bf89624320f541081375ddc3100bee7b76f17649587e746e3d0d18a1470681176131300388072805b30e9182d74a6b6ce754d36b21a17fd99055bd9d9d5c91cfd7ae8633812d19a0a02edec3d208af108ab1139e89835cc685d4"}, 0xb3, 0x0)
msgrcv(r2, &(0x7f0000000180)={0x0, ""/243}, 0xfb, 0x1, 0x2000)
msgget(0x3, 0x3c1)
r3 = msgget(0x0, 0x2)
msgrcv(r3, &(0x7f0000000280)={0x0, ""/143}, 0x97, 0x0, 0x2000)
msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000340)=""/249)
r4 = msgget(0x1, 0x482)
msgrcv(r4, &(0x7f0000000440)={0x0, ""/251}, 0x103, 0x3, 0x45e8b220aa47918d)
r5 = msgget(0x3, 0x3dc)
msgget(0x3, 0x600)
add_key(&(0x7f0000000580)='trusted\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="8debbf3dde5e72d6f12170cf3fa5ed641cc3a1b1e57c7d1183b6f10dfe255ca14211409cddcc8e62e6dfcab86198", 0x2e, 0xffffffffffffffff)
r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
msgctl$IPC_RMID(r5, 0x0)
msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000640)=""/131)

01:37:08 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x17}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
ioctl$SNAPSHOT_S2RAM(r3, 0x330b)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000084)
ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000340))
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x40814)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000480)=0x2, 0x4)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000004c0))
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000500)={0x9, 0x7})
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000540))
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000580))
r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f00000005c0))
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x44081)

01:37:08 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0x8)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x7f, 0x6, 0xfe13}]}, 0x10)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000100))
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x4c000)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0)
write$rfkill(r2, &(0x7f00000002c0)={0x7, 0x7, 0x2, 0x0, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
pipe2(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000380))
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r5=>0x0, 0x4, 0x54, 0x9, 0x1, 0x10, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8000, 0x4}})
bind$bt_sco(r3, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
write$rfkill(r4, &(0x7f00000004c0)={0x81, 0x9, 0x2}, 0x8)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309)
openat$cgroup(r4, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6tnl0\x00', r5, 0x4, 0xee, 0xc9, 0x1ff, 0x1f, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x20, 0x9, 0xaf4}})
syz_genetlink_get_family_id$gtp(&(0x7f0000000600), r3)
socket$nl_audit(0x10, 0x3, 0x9)

01:37:08 executing program 2:
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2d4, 0x12, 0x100, 0x70bd29, 0x25dfdbff, {0x25, 0x80, 0x2e, 0x4, {0x4e23, 0x4e21, [0x2a8, 0x2, 0xda1f, 0x2], [0x9, 0x1, 0x9, 0x4], 0x0, [0x7475, 0x4]}, 0xfffffff7, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x96, 0x1, "7301d28460a76c8cdeb683501fa4688fbfc730a0f1c5dcbadc10f8bcb8ef168d044ee9537d107b29ca455c05c52e98b7e90abe84c0d754849412cdcd56e73c37b5200fb16ae4c4810077f9e9426aa460b7baa29c2ac904ec42603c1779a12b6341b1270b2cdadc20e5ffc24e9817b7a24a407feff52079d1dbe16c9c1442e0a7660feb1a9eaafe5f5cfe606c7649a5c12d21"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "a5370170de9779a2cb187718f31ae0bcd5937772c88528f1eac519fec8706cc38244d546a2556b3b0f5f8eca302c18ef7cc0448431201f1287fdb1791db9aa1f8090e7d8e62eb5098ea88cbb42afc70cc021e15bea400bca56874cd0836f02f3a39004cc9dcc9c78515d4f"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "f6d621224588038afe5585a8a9899a6a6760fc7ee39c026993a8398ada7c37652c4ab4430c08812df70c7b07c43cac256fae94f3971e64590966915da692a75f8cbbbbe55aabbd69f026ee6c2372b7672506e0b9fc93ac461473f27704608cad777b906ba368462aa63bd8bb4c208130eedb111191c972ab5b741c3072e81adf8d118e35aa5430496adc147ddc1625e44096201a2dcdb71c01b1d2e1fe7f3a9868a30a2dfbc3a40b6e4ce9c419402be3fe2ac268acfb311f792c618c675be9060534d774acadbdb89938d1f834a5eb7b8abc76b919"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "4315ba3bcf2e121c28226f4b0b79d0ee6365a6f521fca5f7ec00ab81df037e6a83119e618fbce57f1c2be9324b99e238fcafe525ced034300cd1ff34293863025ceb9b54e4c11590ea3cf8b89c879cf936dbb3ea76fc80c878a7ef56bb34e640b9d5d798d4b33b530c7358f737d451ada60d88f4772bb338aa40ed1ebe3b748695d9b0516dea762584228c527377b564b854bf3c9ca633338081316d9514"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4048001}, 0x48000)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', <r1=>0x0, 0x2f, 0x7f, 0x5, 0x800, 0x22, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x700, 0x1, 0x8aec, 0x80}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000500)=""/229, &(0x7f0000000600)=0xe5)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000006c0)={&(0x7f0000000680)="42dea9fde8730c58586a09847145de08046aafbcc97a29d880d920a9eba95487c74b6d92145eeb4e", 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x28000)
msgget(0x3, 0x80)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'sit0\x00', <r4=>r1, 0x4, 0x40, 0xff, 0x6e, 0x80, @private0, @private0, 0x737, 0x80, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'syztnl1\x00', <r5=>r4, 0x4, 0x2, 0x80, 0x9, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x20, 0x2, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl1\x00', r5, 0x29, 0x0, 0x80, 0x1, 0x0, @remote, @mcast2, 0x40, 0x7, 0xbca, 0x6}})
ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000980)={0x4, 0x21, "e9afd31e2fdfbf924ae149d654bfb64e95c82e5b915545770d90a14b637aa481bd"})
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc}]}, 0x38}}, 0x10)
pipe2(&(0x7f0000000b00)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x85800)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x0, 0x2, 0x72, 0x1, 0x1, @remote, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x80, 0x700, 0x2}})
r9 = clone3(&(0x7f0000000f40)={0x9001000, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0), {0x7}, &(0x7f0000000d00)=""/204, 0xcc, &(0x7f0000000e00)=""/253, &(0x7f0000000f00)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r8}}, 0x58)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000800)
sendto$packet(r7, &(0x7f00000010c0)="64629d6c122945b500338052a018c3512615bc7a7755bb6f524d69f4f633d68452a4ccfcc71032c5319ecd88b4d413a9b513ff41e9d267596b462ffeb53945a16e58c0a3d95283522e969dfab0cbb06b899439bd03902ed9b5a0407e93051eeac26de1c357984966ee314d0e38e94d5ec8896c0165a50ed80dd5ddaabfc06d5ee0be1a3a1f31de23f9", 0x89, 0xc0, &(0x7f0000001180)={0x11, 0xf7, r5, 0x1, 0x1}, 0x14)

01:37:08 executing program 6:
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x1, 0x1, 0x0, 0x1}, 0x8)
write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4, 0x0, 0x0, 0x1}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r0=>0x0, 0x2f, 0x4, 0x0, 0xffff, 0x42, @dev={0xfe, 0x80, '\x00', 0xe}, @local, 0x700, 0x8, 0x472, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r1=>r0, 0x4, 0x2, 0x2, 0x180, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0xfffffffa, 0xad}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', r1, 0x4, 0x80, 0x5, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8, 0x3f, 0x8}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', <r5=>r4, 0x2f, 0x8, 0x81, 0x8, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20, 0x5587af27e26f0b5, 0xffffffff, 0xfffffff8}})
add_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="744a01aae0d9fe10ee8b83ad4bf1b466b86397a457cc521dcb90ae252be39c044276e2e20d97dee29bcb405d2bf95c23937aa63f6c32a63d9d29dd27c51ba6bf5f028f4aad937be9dc068a0626a9ca9215cfce2c4232130e8d1bb023de0a056a7d422007f276cf358ac5e6fcadb1ece7327851af4ed9a49af6ce5b597de918a819af56d4a8c788f6be7f49d25aad9bde05a0c645d79c63726a524d149b9bb4e9d040200bfca670704befd5cf29fbf035e87c0573baa357db861473f63ee69305dc9e16bf11de02a2022429af5e262106a0", 0xd1, 0xfffffffffffffffd)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl2\x00', r5, 0x29, 0x8, 0x7, 0x3ff, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8, 0x70f, 0x6, 0x4}})
r7 = accept4$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14, 0x800)
getpeername$packet(r7, &(0x7f00000006c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14)
bind$packet(r7, &(0x7f0000000740)={0x11, 0x17, r8, 0x1, 0x9, 0x6, @random="728697b1a5c2"}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'sit0\x00', r8, 0x29, 0x40, 0x9, 0x7, 0x40, @private1, @loopback, 0x1, 0x40, 0x8, 0x8001}})
pipe2(&(0x7f0000000840)={<r9=>0xffffffffffffffff}, 0x0)
write$rfkill(r9, &(0x7f0000000880)={0x8, 0x0, 0x2, 0x0, 0x1}, 0x8)
socket$inet6_udplite(0xa, 0x2, 0x88)

01:37:08 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/202)
r0 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/143)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
r1 = shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil)
r2 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
r3 = getgid()
shmctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r3, 0x0, 0xffffffffffffffff, 0x13d, 0x7}, 0x101, 0x7, 0x6, 0x0, 0x0, 0x0, 0x8})
getgid()
shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000001)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000380))
getrusage(0x0, &(0x7f00000003c0))
r4 = shmget(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil)
shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000480)=""/114)
shmget(0x2, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil)
msgget$private(0x0, 0x1a8)
shmctl$IPC_RMID(r2, 0x0)

01:37:08 executing program 0:
r0 = msgget(0x3, 0x200)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/131)
r1 = msgget(0x2, 0x20)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget(0x0, 0x40)
msgsnd(0x0, &(0x7f00000000c0)={0x2, "4c91b35078cd706ab1eee712540880a3b2dfebc82e1113b00378a8a80859b6b35eb2621be109c432d6f19d6bcc900ff5504932b74ab6d0f1ae0a57345f9bab0cb363e91b45aee5091491a0e3c358665510bf89624320f541081375ddc3100bee7b76f17649587e746e3d0d18a1470681176131300388072805b30e9182d74a6b6ce754d36b21a17fd99055bd9d9d5c91cfd7ae8633812d19a0a02edec3d208af108ab1139e89835cc685d4"}, 0xb3, 0x0)
msgrcv(r2, &(0x7f0000000180)={0x0, ""/243}, 0xfb, 0x1, 0x2000)
msgget(0x3, 0x3c1)
r3 = msgget(0x0, 0x2)
msgrcv(r3, &(0x7f0000000280)={0x0, ""/143}, 0x97, 0x0, 0x2000)
msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000340)=""/249)
r4 = msgget(0x1, 0x482)
msgrcv(r4, &(0x7f0000000440)={0x0, ""/251}, 0x103, 0x3, 0x45e8b220aa47918d)
r5 = msgget(0x3, 0x3dc)
msgget(0x3, 0x600)
add_key(&(0x7f0000000580)='trusted\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="8debbf3dde5e72d6f12170cf3fa5ed641cc3a1b1e57c7d1183b6f10dfe255ca14211409cddcc8e62e6dfcab86198", 0x2e, 0xffffffffffffffff)
r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
msgctl$IPC_RMID(r5, 0x0)
msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000640)=""/131)

01:37:09 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0x8)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x7f, 0x6, 0xfe13}]}, 0x10)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000100))
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x4c000)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0)
write$rfkill(r2, &(0x7f00000002c0)={0x7, 0x7, 0x2, 0x0, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
pipe2(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000380))
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r5=>0x0, 0x4, 0x54, 0x9, 0x1, 0x10, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8000, 0x4}})
bind$bt_sco(r3, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
write$rfkill(r4, &(0x7f00000004c0)={0x81, 0x9, 0x2}, 0x8)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309)
openat$cgroup(r4, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6tnl0\x00', r5, 0x4, 0xee, 0xc9, 0x1ff, 0x1f, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x20, 0x9, 0xaf4}})
syz_genetlink_get_family_id$gtp(&(0x7f0000000600), r3)
socket$nl_audit(0x10, 0x3, 0x9)

01:37:09 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/202)
r0 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/143)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
r1 = shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil)
r2 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
r3 = getgid()
shmctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r3, 0x0, 0xffffffffffffffff, 0x13d, 0x7}, 0x101, 0x7, 0x6, 0x0, 0x0, 0x0, 0x8})
getgid()
shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000001)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000380))
getrusage(0x0, &(0x7f00000003c0))
r4 = shmget(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil)
shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000480)=""/114)
shmget(0x2, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil)
msgget$private(0x0, 0x1a8)
shmctl$IPC_RMID(r2, 0x0)

01:37:09 executing program 0:
r0 = msgget(0x3, 0x200)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/131)
r1 = msgget(0x2, 0x20)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget(0x0, 0x40)
msgsnd(0x0, &(0x7f00000000c0)={0x2, "4c91b35078cd706ab1eee712540880a3b2dfebc82e1113b00378a8a80859b6b35eb2621be109c432d6f19d6bcc900ff5504932b74ab6d0f1ae0a57345f9bab0cb363e91b45aee5091491a0e3c358665510bf89624320f541081375ddc3100bee7b76f17649587e746e3d0d18a1470681176131300388072805b30e9182d74a6b6ce754d36b21a17fd99055bd9d9d5c91cfd7ae8633812d19a0a02edec3d208af108ab1139e89835cc685d4"}, 0xb3, 0x0)
msgrcv(r2, &(0x7f0000000180)={0x0, ""/243}, 0xfb, 0x1, 0x2000)
msgget(0x3, 0x3c1)
r3 = msgget(0x0, 0x2)
msgrcv(r3, &(0x7f0000000280)={0x0, ""/143}, 0x97, 0x0, 0x2000)
msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000340)=""/249)
r4 = msgget(0x1, 0x482)
msgrcv(r4, &(0x7f0000000440)={0x0, ""/251}, 0x103, 0x3, 0x45e8b220aa47918d)
r5 = msgget(0x3, 0x3dc)
msgget(0x3, 0x600)
add_key(&(0x7f0000000580)='trusted\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="8debbf3dde5e72d6f12170cf3fa5ed641cc3a1b1e57c7d1183b6f10dfe255ca14211409cddcc8e62e6dfcab86198", 0x2e, 0xffffffffffffffff)
r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$NS_GET_USERNS(r6, 0xb701, 0x0)
msgctl$IPC_RMID(r5, 0x0)
msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000640)=""/131)

01:37:09 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x17}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
ioctl$SNAPSHOT_S2RAM(r3, 0x330b)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000084)
ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000340))
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x40814)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000480)=0x2, 0x4)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000004c0))
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000500)={0x9, 0x7})
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000540))
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000580))
r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f00000005c0))
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x44081)

01:37:09 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/202)
r0 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/143)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
r1 = shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil)
r2 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
r3 = getgid()
shmctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r3, 0x0, 0xffffffffffffffff, 0x13d, 0x7}, 0x101, 0x7, 0x6, 0x0, 0x0, 0x0, 0x8})
getgid()
shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000001)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000380))
getrusage(0x0, &(0x7f00000003c0))
r4 = shmget(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil)
shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000480)=""/114)
shmget(0x2, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil)
msgget$private(0x0, 0x1a8)
shmctl$IPC_RMID(r2, 0x0)

01:37:09 executing program 0:
r0 = msgget(0x3, 0x200)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/131)
r1 = msgget(0x2, 0x20)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget(0x0, 0x40)
msgsnd(0x0, &(0x7f00000000c0)={0x2, "4c91b35078cd706ab1eee712540880a3b2dfebc82e1113b00378a8a80859b6b35eb2621be109c432d6f19d6bcc900ff5504932b74ab6d0f1ae0a57345f9bab0cb363e91b45aee5091491a0e3c358665510bf89624320f541081375ddc3100bee7b76f17649587e746e3d0d18a1470681176131300388072805b30e9182d74a6b6ce754d36b21a17fd99055bd9d9d5c91cfd7ae8633812d19a0a02edec3d208af108ab1139e89835cc685d4"}, 0xb3, 0x0)
msgrcv(r2, &(0x7f0000000180)={0x0, ""/243}, 0xfb, 0x1, 0x2000)
msgget(0x3, 0x3c1)
r3 = msgget(0x0, 0x2)
msgrcv(r3, &(0x7f0000000280)={0x0, ""/143}, 0x97, 0x0, 0x2000)
msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000340)=""/249)
r4 = msgget(0x1, 0x482)
msgrcv(r4, &(0x7f0000000440)={0x0, ""/251}, 0x103, 0x3, 0x45e8b220aa47918d)
msgget(0x3, 0x3dc)
msgget(0x3, 0x600)
add_key(&(0x7f0000000580)='trusted\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="8debbf3dde5e72d6f12170cf3fa5ed641cc3a1b1e57c7d1183b6f10dfe255ca14211409cddcc8e62e6dfcab86198", 0x2e, 0xffffffffffffffff)
r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)
msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000640)=""/131)

01:37:23 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket(0x2, 0x80000, 0x101)
pipe2(&(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf41}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8010}, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_DELPDP(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x40080)
pipe2(&(0x7f0000000400)={<r7=>0xffffffffffffffff}, 0x4000)
getsockopt$bt_sco_SCO_CONNINFO(r7, 0x11, 0x2, &(0x7f0000000440)=""/255, &(0x7f0000000540)=0xff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan4\x00', <r10=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x408004}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r8)
sendmsg$IEEE802154_LIST_PHY(r11, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r12, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x6)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305)

01:37:23 executing program 2:
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2d4, 0x12, 0x100, 0x70bd29, 0x25dfdbff, {0x25, 0x80, 0x2e, 0x4, {0x4e23, 0x4e21, [0x2a8, 0x2, 0xda1f, 0x2], [0x9, 0x1, 0x9, 0x4], 0x0, [0x7475, 0x4]}, 0xfffffff7, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x96, 0x1, "7301d28460a76c8cdeb683501fa4688fbfc730a0f1c5dcbadc10f8bcb8ef168d044ee9537d107b29ca455c05c52e98b7e90abe84c0d754849412cdcd56e73c37b5200fb16ae4c4810077f9e9426aa460b7baa29c2ac904ec42603c1779a12b6341b1270b2cdadc20e5ffc24e9817b7a24a407feff52079d1dbe16c9c1442e0a7660feb1a9eaafe5f5cfe606c7649a5c12d21"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "a5370170de9779a2cb187718f31ae0bcd5937772c88528f1eac519fec8706cc38244d546a2556b3b0f5f8eca302c18ef7cc0448431201f1287fdb1791db9aa1f8090e7d8e62eb5098ea88cbb42afc70cc021e15bea400bca56874cd0836f02f3a39004cc9dcc9c78515d4f"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "f6d621224588038afe5585a8a9899a6a6760fc7ee39c026993a8398ada7c37652c4ab4430c08812df70c7b07c43cac256fae94f3971e64590966915da692a75f8cbbbbe55aabbd69f026ee6c2372b7672506e0b9fc93ac461473f27704608cad777b906ba368462aa63bd8bb4c208130eedb111191c972ab5b741c3072e81adf8d118e35aa5430496adc147ddc1625e44096201a2dcdb71c01b1d2e1fe7f3a9868a30a2dfbc3a40b6e4ce9c419402be3fe2ac268acfb311f792c618c675be9060534d774acadbdb89938d1f834a5eb7b8abc76b919"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "4315ba3bcf2e121c28226f4b0b79d0ee6365a6f521fca5f7ec00ab81df037e6a83119e618fbce57f1c2be9324b99e238fcafe525ced034300cd1ff34293863025ceb9b54e4c11590ea3cf8b89c879cf936dbb3ea76fc80c878a7ef56bb34e640b9d5d798d4b33b530c7358f737d451ada60d88f4772bb338aa40ed1ebe3b748695d9b0516dea762584228c527377b564b854bf3c9ca633338081316d9514"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4048001}, 0x48000)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', <r1=>0x0, 0x2f, 0x7f, 0x5, 0x800, 0x22, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x700, 0x1, 0x8aec, 0x80}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000500)=""/229, &(0x7f0000000600)=0xe5)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000006c0)={&(0x7f0000000680)="42dea9fde8730c58586a09847145de08046aafbcc97a29d880d920a9eba95487c74b6d92145eeb4e", 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x28000)
msgget(0x3, 0x80)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'sit0\x00', <r4=>r1, 0x4, 0x40, 0xff, 0x6e, 0x80, @private0, @private0, 0x737, 0x80, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'syztnl1\x00', <r5=>r4, 0x4, 0x2, 0x80, 0x9, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x20, 0x2, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl1\x00', r5, 0x29, 0x0, 0x80, 0x1, 0x0, @remote, @mcast2, 0x40, 0x7, 0xbca, 0x6}})
ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000980)={0x4, 0x21, "e9afd31e2fdfbf924ae149d654bfb64e95c82e5b915545770d90a14b637aa481bd"})
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc}]}, 0x38}}, 0x10)
pipe2(&(0x7f0000000b00)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x85800)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x0, 0x2, 0x72, 0x1, 0x1, @remote, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x80, 0x700, 0x2}})
clone3(&(0x7f0000000f40)={0x9001000, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0), {0x7}, &(0x7f0000000d00)=""/204, 0xcc, &(0x7f0000000e00)=""/253, &(0x7f0000000f00)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r8}}, 0x58)
sendto$packet(r7, &(0x7f00000010c0)="64629d6c122945b500338052a018c3512615bc7a7755bb6f524d69f4f633d68452a4ccfcc71032c5319ecd88b4d413a9b513ff41e9d267596b462ffeb53945a16e58c0a3d95283522e969dfab0cbb06b899439bd03902ed9b5a0407e93051eeac26de1c357984966ee314d0e38e94d5ec8896c0165a50ed80dd5ddaabfc06d5ee0be1a3a1f31de23f9", 0x89, 0xc0, &(0x7f0000001180)={0x11, 0xf7, r5, 0x1, 0x1}, 0x14)

01:37:23 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000050)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4050)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x44d}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044094)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', <r2=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004894}, 0x4041041)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'sit0\x00', <r4=>0x0, 0x4, 0x3, 0x7f, 0x6, 0x46, @private0, @mcast1, 0x40, 0x8000, 0x0, 0x6}})
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40c4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan3\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r6, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl2\x00', <r8=>r4, 0x4, 0x1, 0x3, 0x3f, 0x8, @local, @empty, 0x7800, 0x80, 0x1, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'syztnl0\x00', r8, 0x29, 0x2, 0xbe, 0x755ba5c2, 0x40, @loopback, @empty, 0x40, 0x8000, 0x7, 0x4}})
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40820000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x64}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x1091f6e8134af7f5}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xe2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000091}, 0x4010)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r5)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1008090}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r9, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x1)

01:37:23 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/202)
r0 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/143)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
r1 = shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil)
r2 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
r3 = getgid()
shmctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r3, 0x0, 0xffffffffffffffff, 0x13d, 0x7}, 0x101, 0x7, 0x6, 0x0, 0x0, 0x0, 0x8})
getgid()
shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000001)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000380))
getrusage(0x0, &(0x7f00000003c0))
r4 = shmget(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil)
shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000480)=""/114)
shmget(0x2, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_RMID(r2, 0x0)

01:37:23 executing program 0:
r0 = msgget(0x3, 0x200)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/131)
r1 = msgget(0x2, 0x20)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget(0x0, 0x40)
msgsnd(0x0, &(0x7f00000000c0)={0x2, "4c91b35078cd706ab1eee712540880a3b2dfebc82e1113b00378a8a80859b6b35eb2621be109c432d6f19d6bcc900ff5504932b74ab6d0f1ae0a57345f9bab0cb363e91b45aee5091491a0e3c358665510bf89624320f541081375ddc3100bee7b76f17649587e746e3d0d18a1470681176131300388072805b30e9182d74a6b6ce754d36b21a17fd99055bd9d9d5c91cfd7ae8633812d19a0a02edec3d208af108ab1139e89835cc685d4"}, 0xb3, 0x0)
msgrcv(r2, &(0x7f0000000180)={0x0, ""/243}, 0xfb, 0x1, 0x2000)
msgget(0x3, 0x3c1)
r3 = msgget(0x0, 0x2)
msgrcv(r3, &(0x7f0000000280)={0x0, ""/143}, 0x97, 0x0, 0x2000)
msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000340)=""/249)
r4 = msgget(0x1, 0x482)
msgrcv(r4, &(0x7f0000000440)={0x0, ""/251}, 0x103, 0x3, 0x45e8b220aa47918d)
msgget(0x3, 0x3dc)
msgget(0x3, 0x600)
add_key(&(0x7f0000000580)='trusted\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="8debbf3dde5e72d6f12170cf3fa5ed641cc3a1b1e57c7d1183b6f10dfe255ca14211409cddcc8e62e6dfcab86198", 0x2e, 0xffffffffffffffff)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000640)=""/131)

01:37:23 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0x8)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x7f, 0x6, 0xfe13}]}, 0x10)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000100))
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x4c000)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0)
write$rfkill(r2, &(0x7f00000002c0)={0x7, 0x7, 0x2, 0x0, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
pipe2(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000380))
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r5=>0x0, 0x4, 0x54, 0x9, 0x1, 0x10, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8000, 0x4}})
bind$bt_sco(r3, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
write$rfkill(r4, &(0x7f00000004c0)={0x81, 0x9, 0x2}, 0x8)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309)
openat$cgroup(r4, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6tnl0\x00', r5, 0x4, 0xee, 0xc9, 0x1ff, 0x1f, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x20, 0x9, 0xaf4}})
syz_genetlink_get_family_id$gtp(&(0x7f0000000600), r3)
socket$nl_audit(0x10, 0x3, 0x9)

01:37:23 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x17}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
ioctl$SNAPSHOT_S2RAM(r3, 0x330b)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000084)
ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000340))
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x40814)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000480)=0x2, 0x4)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000004c0))
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000500)={0x9, 0x7})
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000540))
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000580))
r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f00000005c0))
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x44081)

01:37:23 executing program 6:
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x1, 0x1, 0x0, 0x1}, 0x8)
write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4, 0x0, 0x0, 0x1}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r0=>0x0, 0x2f, 0x4, 0x0, 0xffff, 0x42, @dev={0xfe, 0x80, '\x00', 0xe}, @local, 0x700, 0x8, 0x472, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r1=>r0, 0x4, 0x2, 0x2, 0x180, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0xfffffffa, 0xad}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', r1, 0x4, 0x80, 0x5, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8, 0x3f, 0x8}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', <r5=>r4, 0x2f, 0x8, 0x81, 0x8, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20, 0x5587af27e26f0b5, 0xffffffff, 0xfffffff8}})
add_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="744a01aae0d9fe10ee8b83ad4bf1b466b86397a457cc521dcb90ae252be39c044276e2e20d97dee29bcb405d2bf95c23937aa63f6c32a63d9d29dd27c51ba6bf5f028f4aad937be9dc068a0626a9ca9215cfce2c4232130e8d1bb023de0a056a7d422007f276cf358ac5e6fcadb1ece7327851af4ed9a49af6ce5b597de918a819af56d4a8c788f6be7f49d25aad9bde05a0c645d79c63726a524d149b9bb4e9d040200bfca670704befd5cf29fbf035e87c0573baa357db861473f63ee69305dc9e16bf11de02a2022429af5e262106a0", 0xd1, 0xfffffffffffffffd)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl2\x00', r5, 0x29, 0x8, 0x7, 0x3ff, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8, 0x70f, 0x6, 0x4}})
r7 = accept4$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14, 0x800)
getpeername$packet(r7, &(0x7f00000006c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14)
bind$packet(r7, &(0x7f0000000740)={0x11, 0x17, r8, 0x1, 0x9, 0x6, @random="728697b1a5c2"}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'sit0\x00', r8, 0x29, 0x40, 0x9, 0x7, 0x40, @private1, @loopback, 0x1, 0x40, 0x8, 0x8001}})
pipe2(&(0x7f0000000840)={<r9=>0xffffffffffffffff}, 0x0)
write$rfkill(r9, &(0x7f0000000880)={0x8, 0x0, 0x2, 0x0, 0x1}, 0x8)

01:37:23 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/202)
r0 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/143)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
r1 = shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil)
r2 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
r3 = getgid()
shmctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r3, 0x0, 0xffffffffffffffff, 0x13d, 0x7}, 0x101, 0x7, 0x6, 0x0, 0x0, 0x0, 0x8})
getgid()
shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000001)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000380))
getrusage(0x0, &(0x7f00000003c0))
r4 = shmget(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil)
shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000480)=""/114)
shmctl$IPC_RMID(r2, 0x0)

01:37:23 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/202)
r0 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/143)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
r1 = shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil)
r2 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
r3 = getgid()
shmctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r3, 0x0, 0xffffffffffffffff, 0x13d, 0x7}, 0x101, 0x7, 0x6, 0x0, 0x0, 0x0, 0x8})
getgid()
shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000001)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000380))
getrusage(0x0, &(0x7f00000003c0))
shmget(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil)
shmctl$IPC_RMID(r2, 0x0)

01:37:23 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0x8)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x7f, 0x6, 0xfe13}]}, 0x10)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000100))
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x4c000)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0)
write$rfkill(r2, &(0x7f00000002c0)={0x7, 0x7, 0x2, 0x0, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
pipe2(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000380))
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r5=>0x0, 0x4, 0x54, 0x9, 0x1, 0x10, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8000, 0x4}})
bind$bt_sco(r3, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
write$rfkill(r4, &(0x7f00000004c0)={0x81, 0x9, 0x2}, 0x8)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309)
openat$cgroup(r4, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6tnl0\x00', r5, 0x4, 0xee, 0xc9, 0x1ff, 0x1f, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x20, 0x9, 0xaf4}})
syz_genetlink_get_family_id$gtp(&(0x7f0000000600), r3)

01:37:23 executing program 0:
r0 = msgget(0x3, 0x200)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/131)
r1 = msgget(0x2, 0x20)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget(0x0, 0x40)
msgsnd(0x0, &(0x7f00000000c0)={0x2, "4c91b35078cd706ab1eee712540880a3b2dfebc82e1113b00378a8a80859b6b35eb2621be109c432d6f19d6bcc900ff5504932b74ab6d0f1ae0a57345f9bab0cb363e91b45aee5091491a0e3c358665510bf89624320f541081375ddc3100bee7b76f17649587e746e3d0d18a1470681176131300388072805b30e9182d74a6b6ce754d36b21a17fd99055bd9d9d5c91cfd7ae8633812d19a0a02edec3d208af108ab1139e89835cc685d4"}, 0xb3, 0x0)
msgrcv(r2, &(0x7f0000000180)={0x0, ""/243}, 0xfb, 0x1, 0x2000)
msgget(0x3, 0x3c1)
r3 = msgget(0x0, 0x2)
msgrcv(r3, &(0x7f0000000280)={0x0, ""/143}, 0x97, 0x0, 0x2000)
msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000340)=""/249)
r4 = msgget(0x1, 0x482)
msgrcv(r4, &(0x7f0000000440)={0x0, ""/251}, 0x103, 0x3, 0x45e8b220aa47918d)
msgget(0x3, 0x3dc)
msgget(0x3, 0x600)
add_key(&(0x7f0000000580)='trusted\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="8debbf3dde5e72d6f12170cf3fa5ed641cc3a1b1e57c7d1183b6f10dfe255ca14211409cddcc8e62e6dfcab86198", 0x2e, 0xffffffffffffffff)
msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000640)=""/131)

01:37:23 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/202)
r0 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/143)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
r1 = shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil)
r2 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
r3 = getgid()
shmctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r3, 0x0, 0xffffffffffffffff, 0x13d, 0x7}, 0x101, 0x7, 0x6, 0x0, 0x0, 0x0, 0x8})
getgid()
shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000001)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000380))
getrusage(0x0, &(0x7f00000003c0))
shmctl$IPC_RMID(r2, 0x0)

01:37:23 executing program 6:
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x1, 0x1, 0x0, 0x1}, 0x8)
write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4, 0x0, 0x0, 0x1}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r0=>0x0, 0x2f, 0x4, 0x0, 0xffff, 0x42, @dev={0xfe, 0x80, '\x00', 0xe}, @local, 0x700, 0x8, 0x472, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r1=>r0, 0x4, 0x2, 0x2, 0x180, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0xfffffffa, 0xad}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', r1, 0x4, 0x80, 0x5, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8, 0x3f, 0x8}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', <r5=>r4, 0x2f, 0x8, 0x81, 0x8, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20, 0x5587af27e26f0b5, 0xffffffff, 0xfffffff8}})
add_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="744a01aae0d9fe10ee8b83ad4bf1b466b86397a457cc521dcb90ae252be39c044276e2e20d97dee29bcb405d2bf95c23937aa63f6c32a63d9d29dd27c51ba6bf5f028f4aad937be9dc068a0626a9ca9215cfce2c4232130e8d1bb023de0a056a7d422007f276cf358ac5e6fcadb1ece7327851af4ed9a49af6ce5b597de918a819af56d4a8c788f6be7f49d25aad9bde05a0c645d79c63726a524d149b9bb4e9d040200bfca670704befd5cf29fbf035e87c0573baa357db861473f63ee69305dc9e16bf11de02a2022429af5e262106a0", 0xd1, 0xfffffffffffffffd)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl2\x00', r5, 0x29, 0x8, 0x7, 0x3ff, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8, 0x70f, 0x6, 0x4}})
r7 = accept4$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14, 0x800)
getpeername$packet(r7, &(0x7f00000006c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14)
bind$packet(r7, &(0x7f0000000740)={0x11, 0x17, r8, 0x1, 0x9, 0x6, @random="728697b1a5c2"}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'sit0\x00', r8, 0x29, 0x40, 0x9, 0x7, 0x40, @private1, @loopback, 0x1, 0x40, 0x8, 0x8001}})
write$rfkill(0xffffffffffffffff, &(0x7f0000000880)={0x8, 0x0, 0x2, 0x0, 0x1}, 0x8)

01:37:23 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x17}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
ioctl$SNAPSHOT_S2RAM(r3, 0x330b)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000084)
ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000340))
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x40814)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000480)=0x2, 0x4)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000004c0))
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000500)={0x9, 0x7})
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000540))
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000580))
r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f00000005c0))
syz_genetlink_get_family_id$gtp(&(0x7f0000000640), 0xffffffffffffffff)

01:37:23 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/202)
r0 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/143)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
r1 = shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil)
r2 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
r3 = getgid()
shmctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r3, 0x0, 0xffffffffffffffff, 0x13d, 0x7}, 0x101, 0x7, 0x6, 0x0, 0x0, 0x0, 0x8})
getgid()
shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000001)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000380))
shmctl$IPC_RMID(r2, 0x0)

01:37:24 executing program 2:
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2d4, 0x12, 0x100, 0x70bd29, 0x25dfdbff, {0x25, 0x80, 0x2e, 0x4, {0x4e23, 0x4e21, [0x2a8, 0x2, 0xda1f, 0x2], [0x9, 0x1, 0x9, 0x4], 0x0, [0x7475, 0x4]}, 0xfffffff7, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x96, 0x1, "7301d28460a76c8cdeb683501fa4688fbfc730a0f1c5dcbadc10f8bcb8ef168d044ee9537d107b29ca455c05c52e98b7e90abe84c0d754849412cdcd56e73c37b5200fb16ae4c4810077f9e9426aa460b7baa29c2ac904ec42603c1779a12b6341b1270b2cdadc20e5ffc24e9817b7a24a407feff52079d1dbe16c9c1442e0a7660feb1a9eaafe5f5cfe606c7649a5c12d21"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "a5370170de9779a2cb187718f31ae0bcd5937772c88528f1eac519fec8706cc38244d546a2556b3b0f5f8eca302c18ef7cc0448431201f1287fdb1791db9aa1f8090e7d8e62eb5098ea88cbb42afc70cc021e15bea400bca56874cd0836f02f3a39004cc9dcc9c78515d4f"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "f6d621224588038afe5585a8a9899a6a6760fc7ee39c026993a8398ada7c37652c4ab4430c08812df70c7b07c43cac256fae94f3971e64590966915da692a75f8cbbbbe55aabbd69f026ee6c2372b7672506e0b9fc93ac461473f27704608cad777b906ba368462aa63bd8bb4c208130eedb111191c972ab5b741c3072e81adf8d118e35aa5430496adc147ddc1625e44096201a2dcdb71c01b1d2e1fe7f3a9868a30a2dfbc3a40b6e4ce9c419402be3fe2ac268acfb311f792c618c675be9060534d774acadbdb89938d1f834a5eb7b8abc76b919"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "4315ba3bcf2e121c28226f4b0b79d0ee6365a6f521fca5f7ec00ab81df037e6a83119e618fbce57f1c2be9324b99e238fcafe525ced034300cd1ff34293863025ceb9b54e4c11590ea3cf8b89c879cf936dbb3ea76fc80c878a7ef56bb34e640b9d5d798d4b33b530c7358f737d451ada60d88f4772bb338aa40ed1ebe3b748695d9b0516dea762584228c527377b564b854bf3c9ca633338081316d9514"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4048001}, 0x48000)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', <r1=>0x0, 0x2f, 0x7f, 0x5, 0x800, 0x22, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x700, 0x1, 0x8aec, 0x80}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000500)=""/229, &(0x7f0000000600)=0xe5)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000006c0)={&(0x7f0000000680)="42dea9fde8730c58586a09847145de08046aafbcc97a29d880d920a9eba95487c74b6d92145eeb4e", 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x28000)
msgget(0x3, 0x80)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'sit0\x00', <r4=>r1, 0x4, 0x40, 0xff, 0x6e, 0x80, @private0, @private0, 0x737, 0x80, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'syztnl1\x00', <r5=>r4, 0x4, 0x2, 0x80, 0x9, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x20, 0x2, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl1\x00', r5, 0x29, 0x0, 0x80, 0x1, 0x0, @remote, @mcast2, 0x40, 0x7, 0xbca, 0x6}})
ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000980)={0x4, 0x21, "e9afd31e2fdfbf924ae149d654bfb64e95c82e5b915545770d90a14b637aa481bd"})
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc}]}, 0x38}}, 0x10)
pipe2(&(0x7f0000000b00)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x85800)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x0, 0x2, 0x72, 0x1, 0x1, @remote, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x80, 0x700, 0x2}})
sendto$packet(r7, &(0x7f00000010c0)="64629d6c122945b500338052a018c3512615bc7a7755bb6f524d69f4f633d68452a4ccfcc71032c5319ecd88b4d413a9b513ff41e9d267596b462ffeb53945a16e58c0a3d95283522e969dfab0cbb06b899439bd03902ed9b5a0407e93051eeac26de1c357984966ee314d0e38e94d5ec8896c0165a50ed80dd5ddaabfc06d5ee0be1a3a1f31de23f9", 0x89, 0xc0, &(0x7f0000001180)={0x11, 0xf7, r5, 0x1, 0x1}, 0x14)

01:37:35 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/202)
r0 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/143)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil)
r1 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
r2 = getgid()
shmctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r2, 0x0, 0xffffffffffffffff, 0x13d, 0x7}, 0x101, 0x7, 0x6, 0x0, 0x0, 0x0, 0x8})
getgid()
shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000001)
shmctl$IPC_RMID(r1, 0x0)

01:37:35 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket(0x2, 0x80000, 0x101)
pipe2(&(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf41}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8010}, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_DELPDP(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x40080)
pipe2(&(0x7f0000000400)={<r7=>0xffffffffffffffff}, 0x4000)
getsockopt$bt_sco_SCO_CONNINFO(r7, 0x11, 0x2, &(0x7f0000000440)=""/255, &(0x7f0000000540)=0xff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan4\x00', <r10=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x408004}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r8)
sendmsg$IEEE802154_LIST_PHY(r11, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r12, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x6)

01:37:35 executing program 0:
r0 = msgget(0x3, 0x200)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/131)
r1 = msgget(0x2, 0x20)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget(0x0, 0x40)
msgsnd(0x0, &(0x7f00000000c0)={0x2, "4c91b35078cd706ab1eee712540880a3b2dfebc82e1113b00378a8a80859b6b35eb2621be109c432d6f19d6bcc900ff5504932b74ab6d0f1ae0a57345f9bab0cb363e91b45aee5091491a0e3c358665510bf89624320f541081375ddc3100bee7b76f17649587e746e3d0d18a1470681176131300388072805b30e9182d74a6b6ce754d36b21a17fd99055bd9d9d5c91cfd7ae8633812d19a0a02edec3d208af108ab1139e89835cc685d4"}, 0xb3, 0x0)
msgrcv(r2, &(0x7f0000000180)={0x0, ""/243}, 0xfb, 0x1, 0x2000)
msgget(0x3, 0x3c1)
r3 = msgget(0x0, 0x2)
msgrcv(r3, &(0x7f0000000280)={0x0, ""/143}, 0x97, 0x0, 0x2000)
msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000340)=""/249)
r4 = msgget(0x1, 0x482)
msgrcv(r4, &(0x7f0000000440)={0x0, ""/251}, 0x103, 0x3, 0x45e8b220aa47918d)
msgget(0x3, 0x3dc)
msgget(0x3, 0x600)
msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000640)=""/131)

01:37:35 executing program 6:
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x1, 0x1, 0x0, 0x1}, 0x8)
write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4, 0x0, 0x0, 0x1}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r0=>0x0, 0x2f, 0x4, 0x0, 0xffff, 0x42, @dev={0xfe, 0x80, '\x00', 0xe}, @local, 0x700, 0x8, 0x472, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r1=>r0, 0x4, 0x2, 0x2, 0x180, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0xfffffffa, 0xad}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', r1, 0x4, 0x80, 0x5, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8, 0x3f, 0x8}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', <r5=>r4, 0x2f, 0x8, 0x81, 0x8, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20, 0x5587af27e26f0b5, 0xffffffff, 0xfffffff8}})
add_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="744a01aae0d9fe10ee8b83ad4bf1b466b86397a457cc521dcb90ae252be39c044276e2e20d97dee29bcb405d2bf95c23937aa63f6c32a63d9d29dd27c51ba6bf5f028f4aad937be9dc068a0626a9ca9215cfce2c4232130e8d1bb023de0a056a7d422007f276cf358ac5e6fcadb1ece7327851af4ed9a49af6ce5b597de918a819af56d4a8c788f6be7f49d25aad9bde05a0c645d79c63726a524d149b9bb4e9d040200bfca670704befd5cf29fbf035e87c0573baa357db861473f63ee69305dc9e16bf11de02a2022429af5e262106a0", 0xd1, 0xfffffffffffffffd)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl2\x00', r5, 0x29, 0x8, 0x7, 0x3ff, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8, 0x70f, 0x6, 0x4}})
r7 = accept4$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14, 0x800)
getpeername$packet(r7, &(0x7f00000006c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14)
bind$packet(r7, &(0x7f0000000740)={0x11, 0x17, r8, 0x1, 0x9, 0x6, @random="728697b1a5c2"}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'sit0\x00', r8, 0x29, 0x40, 0x9, 0x7, 0x40, @private1, @loopback, 0x1, 0x40, 0x8, 0x8001}})
write$rfkill(0xffffffffffffffff, &(0x7f0000000880)={0x8, 0x0, 0x2, 0x0, 0x1}, 0x8)

01:37:35 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0x8)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x7f, 0x6, 0xfe13}]}, 0x10)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000100))
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x4c000)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0)
write$rfkill(r2, &(0x7f00000002c0)={0x7, 0x7, 0x2, 0x0, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
pipe2(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000380))
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r5=>0x0, 0x4, 0x54, 0x9, 0x1, 0x10, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8000, 0x4}})
bind$bt_sco(r3, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
write$rfkill(r4, &(0x7f00000004c0)={0x81, 0x9, 0x2}, 0x8)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309)
openat$cgroup(r4, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6tnl0\x00', r5, 0x4, 0xee, 0xc9, 0x1ff, 0x1f, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x20, 0x9, 0xaf4}})

01:37:35 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000050)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4050)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x44d}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044094)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', <r2=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004894}, 0x4041041)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'sit0\x00', <r4=>0x0, 0x4, 0x3, 0x7f, 0x6, 0x46, @private0, @mcast1, 0x40, 0x8000, 0x0, 0x6}})
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40c4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan3\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r6, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl2\x00', <r8=>r4, 0x4, 0x1, 0x3, 0x3f, 0x8, @local, @empty, 0x7800, 0x80, 0x1, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'syztnl0\x00', r8, 0x29, 0x2, 0xbe, 0x755ba5c2, 0x40, @loopback, @empty, 0x40, 0x8000, 0x7, 0x4}})
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40820000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x64}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x1091f6e8134af7f5}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xe2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000091}, 0x4010)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r5)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1008090}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x20, r9, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x1)

01:37:35 executing program 2:
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2d4, 0x12, 0x100, 0x70bd29, 0x25dfdbff, {0x25, 0x80, 0x2e, 0x4, {0x4e23, 0x4e21, [0x2a8, 0x2, 0xda1f, 0x2], [0x9, 0x1, 0x9, 0x4], 0x0, [0x7475, 0x4]}, 0xfffffff7, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x96, 0x1, "7301d28460a76c8cdeb683501fa4688fbfc730a0f1c5dcbadc10f8bcb8ef168d044ee9537d107b29ca455c05c52e98b7e90abe84c0d754849412cdcd56e73c37b5200fb16ae4c4810077f9e9426aa460b7baa29c2ac904ec42603c1779a12b6341b1270b2cdadc20e5ffc24e9817b7a24a407feff52079d1dbe16c9c1442e0a7660feb1a9eaafe5f5cfe606c7649a5c12d21"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "a5370170de9779a2cb187718f31ae0bcd5937772c88528f1eac519fec8706cc38244d546a2556b3b0f5f8eca302c18ef7cc0448431201f1287fdb1791db9aa1f8090e7d8e62eb5098ea88cbb42afc70cc021e15bea400bca56874cd0836f02f3a39004cc9dcc9c78515d4f"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "f6d621224588038afe5585a8a9899a6a6760fc7ee39c026993a8398ada7c37652c4ab4430c08812df70c7b07c43cac256fae94f3971e64590966915da692a75f8cbbbbe55aabbd69f026ee6c2372b7672506e0b9fc93ac461473f27704608cad777b906ba368462aa63bd8bb4c208130eedb111191c972ab5b741c3072e81adf8d118e35aa5430496adc147ddc1625e44096201a2dcdb71c01b1d2e1fe7f3a9868a30a2dfbc3a40b6e4ce9c419402be3fe2ac268acfb311f792c618c675be9060534d774acadbdb89938d1f834a5eb7b8abc76b919"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "4315ba3bcf2e121c28226f4b0b79d0ee6365a6f521fca5f7ec00ab81df037e6a83119e618fbce57f1c2be9324b99e238fcafe525ced034300cd1ff34293863025ceb9b54e4c11590ea3cf8b89c879cf936dbb3ea76fc80c878a7ef56bb34e640b9d5d798d4b33b530c7358f737d451ada60d88f4772bb338aa40ed1ebe3b748695d9b0516dea762584228c527377b564b854bf3c9ca633338081316d9514"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4048001}, 0x48000)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', <r1=>0x0, 0x2f, 0x7f, 0x5, 0x800, 0x22, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x700, 0x1, 0x8aec, 0x80}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000500)=""/229, &(0x7f0000000600)=0xe5)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000006c0)={&(0x7f0000000680)="42dea9fde8730c58586a09847145de08046aafbcc97a29d880d920a9eba95487c74b6d92145eeb4e", 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x28000)
msgget(0x3, 0x80)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'sit0\x00', <r4=>r1, 0x4, 0x40, 0xff, 0x6e, 0x80, @private0, @private0, 0x737, 0x80, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'syztnl1\x00', <r5=>r4, 0x4, 0x2, 0x80, 0x9, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x20, 0x2, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl1\x00', r5, 0x29, 0x0, 0x80, 0x1, 0x0, @remote, @mcast2, 0x40, 0x7, 0xbca, 0x6}})
ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000980)={0x4, 0x21, "e9afd31e2fdfbf924ae149d654bfb64e95c82e5b915545770d90a14b637aa481bd"})
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc}]}, 0x38}}, 0x10)
pipe2(&(0x7f0000000b00)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x85800)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r8, 0x89f5, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x0, 0x2, 0x72, 0x1, 0x1, @remote, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x80, 0x700, 0x2}})
sendto$packet(r7, &(0x7f00000010c0)="64629d6c122945b500338052a018c3512615bc7a7755bb6f524d69f4f633d68452a4ccfcc71032c5319ecd88b4d413a9b513ff41e9d267596b462ffeb53945a16e58c0a3d95283522e969dfab0cbb06b899439bd03902ed9b5a0407e93051eeac26de1c357984966ee314d0e38e94d5ec8896c0165a50ed80dd5ddaabfc06d5ee0be1a3a1f31de23f9", 0x89, 0xc0, &(0x7f0000001180)={0x11, 0xf7, r5, 0x1, 0x1}, 0x14)

01:37:35 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x17}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
ioctl$SNAPSHOT_S2RAM(r3, 0x330b)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000084)
ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000340))
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x40814)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000480)=0x2, 0x4)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000004c0))
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000500)={0x9, 0x7})
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000540))
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000580))
r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f00000005c0))

01:37:49 executing program 6:
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x1, 0x1, 0x0, 0x1}, 0x8)
write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4, 0x0, 0x0, 0x1}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r0=>0x0, 0x2f, 0x4, 0x0, 0xffff, 0x42, @dev={0xfe, 0x80, '\x00', 0xe}, @local, 0x700, 0x8, 0x472, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r1=>r0, 0x4, 0x2, 0x2, 0x180, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0xfffffffa, 0xad}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', r1, 0x4, 0x80, 0x5, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8, 0x3f, 0x8}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', <r5=>r4, 0x2f, 0x8, 0x81, 0x8, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20, 0x5587af27e26f0b5, 0xffffffff, 0xfffffff8}})
add_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="744a01aae0d9fe10ee8b83ad4bf1b466b86397a457cc521dcb90ae252be39c044276e2e20d97dee29bcb405d2bf95c23937aa63f6c32a63d9d29dd27c51ba6bf5f028f4aad937be9dc068a0626a9ca9215cfce2c4232130e8d1bb023de0a056a7d422007f276cf358ac5e6fcadb1ece7327851af4ed9a49af6ce5b597de918a819af56d4a8c788f6be7f49d25aad9bde05a0c645d79c63726a524d149b9bb4e9d040200bfca670704befd5cf29fbf035e87c0573baa357db861473f63ee69305dc9e16bf11de02a2022429af5e262106a0", 0xd1, 0xfffffffffffffffd)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl2\x00', r5, 0x29, 0x8, 0x7, 0x3ff, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8, 0x70f, 0x6, 0x4}})
r7 = accept4$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14, 0x800)
getpeername$packet(r7, &(0x7f00000006c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14)
bind$packet(r7, &(0x7f0000000740)={0x11, 0x17, r8, 0x1, 0x9, 0x6, @random="728697b1a5c2"}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'syztnl2\x00', &(0x7f0000000780)={'sit0\x00', r8, 0x29, 0x40, 0x9, 0x7, 0x40, @private1, @loopback, 0x1, 0x40, 0x8, 0x8001}})
write$rfkill(0xffffffffffffffff, &(0x7f0000000880)={0x8, 0x0, 0x2, 0x0, 0x1}, 0x8)

01:37:49 executing program 2:
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2d4, 0x12, 0x100, 0x70bd29, 0x25dfdbff, {0x25, 0x80, 0x2e, 0x4, {0x4e23, 0x4e21, [0x2a8, 0x2, 0xda1f, 0x2], [0x9, 0x1, 0x9, 0x4], 0x0, [0x7475, 0x4]}, 0xfffffff7, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x96, 0x1, "7301d28460a76c8cdeb683501fa4688fbfc730a0f1c5dcbadc10f8bcb8ef168d044ee9537d107b29ca455c05c52e98b7e90abe84c0d754849412cdcd56e73c37b5200fb16ae4c4810077f9e9426aa460b7baa29c2ac904ec42603c1779a12b6341b1270b2cdadc20e5ffc24e9817b7a24a407feff52079d1dbe16c9c1442e0a7660feb1a9eaafe5f5cfe606c7649a5c12d21"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "a5370170de9779a2cb187718f31ae0bcd5937772c88528f1eac519fec8706cc38244d546a2556b3b0f5f8eca302c18ef7cc0448431201f1287fdb1791db9aa1f8090e7d8e62eb5098ea88cbb42afc70cc021e15bea400bca56874cd0836f02f3a39004cc9dcc9c78515d4f"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "f6d621224588038afe5585a8a9899a6a6760fc7ee39c026993a8398ada7c37652c4ab4430c08812df70c7b07c43cac256fae94f3971e64590966915da692a75f8cbbbbe55aabbd69f026ee6c2372b7672506e0b9fc93ac461473f27704608cad777b906ba368462aa63bd8bb4c208130eedb111191c972ab5b741c3072e81adf8d118e35aa5430496adc147ddc1625e44096201a2dcdb71c01b1d2e1fe7f3a9868a30a2dfbc3a40b6e4ce9c419402be3fe2ac268acfb311f792c618c675be9060534d774acadbdb89938d1f834a5eb7b8abc76b919"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "4315ba3bcf2e121c28226f4b0b79d0ee6365a6f521fca5f7ec00ab81df037e6a83119e618fbce57f1c2be9324b99e238fcafe525ced034300cd1ff34293863025ceb9b54e4c11590ea3cf8b89c879cf936dbb3ea76fc80c878a7ef56bb34e640b9d5d798d4b33b530c7358f737d451ada60d88f4772bb338aa40ed1ebe3b748695d9b0516dea762584228c527377b564b854bf3c9ca633338081316d9514"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4048001}, 0x48000)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', <r1=>0x0, 0x2f, 0x7f, 0x5, 0x800, 0x22, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x700, 0x1, 0x8aec, 0x80}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000500)=""/229, &(0x7f0000000600)=0xe5)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000006c0)={&(0x7f0000000680)="42dea9fde8730c58586a09847145de08046aafbcc97a29d880d920a9eba95487c74b6d92145eeb4e", 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x28000)
msgget(0x3, 0x80)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'sit0\x00', <r4=>r1, 0x4, 0x40, 0xff, 0x6e, 0x80, @private0, @private0, 0x737, 0x80, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'syztnl1\x00', <r5=>r4, 0x4, 0x2, 0x80, 0x9, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x20, 0x2, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl1\x00', r5, 0x29, 0x0, 0x80, 0x1, 0x0, @remote, @mcast2, 0x40, 0x7, 0xbca, 0x6}})
ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000980)={0x4, 0x21, "e9afd31e2fdfbf924ae149d654bfb64e95c82e5b915545770d90a14b637aa481bd"})
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc}]}, 0x38}}, 0x10)
pipe2(&(0x7f0000000b00)={<r7=>0xffffffffffffffff}, 0x85800)
sendto$packet(r7, &(0x7f00000010c0)="64629d6c122945b500338052a018c3512615bc7a7755bb6f524d69f4f633d68452a4ccfcc71032c5319ecd88b4d413a9b513ff41e9d267596b462ffeb53945a16e58c0a3d95283522e969dfab0cbb06b899439bd03902ed9b5a0407e93051eeac26de1c357984966ee314d0e38e94d5ec8896c0165a50ed80dd5ddaabfc06d5ee0be1a3a1f31de23f9", 0x89, 0xc0, &(0x7f0000001180)={0x11, 0xf7, r5, 0x1, 0x1}, 0x14)

01:37:49 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/202)
r0 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/143)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil)
r1 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
r2 = getgid()
shmctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r2, 0x0, 0xffffffffffffffff, 0x13d, 0x7}, 0x101, 0x7, 0x6, 0x0, 0x0, 0x0, 0x8})
getgid()
shmget(0x3, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_RMID(r1, 0x0)

01:37:49 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x17}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
ioctl$SNAPSHOT_S2RAM(r3, 0x330b)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000084)
ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000340))
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x40814)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000480)=0x2, 0x4)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000004c0))
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000500)={0x9, 0x7})
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000540))
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000580))
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)

01:37:49 executing program 0:
r0 = msgget(0x3, 0x200)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/131)
r1 = msgget(0x2, 0x20)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget(0x0, 0x40)
msgsnd(0x0, &(0x7f00000000c0)={0x2, "4c91b35078cd706ab1eee712540880a3b2dfebc82e1113b00378a8a80859b6b35eb2621be109c432d6f19d6bcc900ff5504932b74ab6d0f1ae0a57345f9bab0cb363e91b45aee5091491a0e3c358665510bf89624320f541081375ddc3100bee7b76f17649587e746e3d0d18a1470681176131300388072805b30e9182d74a6b6ce754d36b21a17fd99055bd9d9d5c91cfd7ae8633812d19a0a02edec3d208af108ab1139e89835cc685d4"}, 0xb3, 0x0)
msgrcv(r2, &(0x7f0000000180)={0x0, ""/243}, 0xfb, 0x1, 0x2000)
msgget(0x3, 0x3c1)
r3 = msgget(0x0, 0x2)
msgrcv(r3, &(0x7f0000000280)={0x0, ""/143}, 0x97, 0x0, 0x2000)
msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000340)=""/249)
r4 = msgget(0x1, 0x482)
msgrcv(r4, &(0x7f0000000440)={0x0, ""/251}, 0x103, 0x3, 0x45e8b220aa47918d)
msgget(0x3, 0x3dc)
msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000640)=""/131)

01:37:49 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0x8)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x7f, 0x6, 0xfe13}]}, 0x10)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000100))
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x4c000)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0)
write$rfkill(r2, &(0x7f00000002c0)={0x7, 0x7, 0x2, 0x0, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
pipe2(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000380))
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0x54, 0x9, 0x1, 0x10, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8000, 0x4}})
bind$bt_sco(r3, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
write$rfkill(r4, &(0x7f00000004c0)={0x81, 0x9, 0x2}, 0x8)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309)
openat$cgroup(r4, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0)

01:37:49 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket(0x2, 0x80000, 0x101)
pipe2(&(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf41}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8010}, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_DELPDP(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x40080)
pipe2(&(0x7f0000000400)={<r7=>0xffffffffffffffff}, 0x4000)
getsockopt$bt_sco_SCO_CONNINFO(r7, 0x11, 0x2, &(0x7f0000000440)=""/255, &(0x7f0000000540)=0xff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan4\x00', <r10=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x408004}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_PHY(r11, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x6)

01:37:49 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000050)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4050)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x44d}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044094)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', <r2=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004894}, 0x4041041)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'sit0\x00', <r4=>0x0, 0x4, 0x3, 0x7f, 0x6, 0x46, @private0, @mcast1, 0x40, 0x8000, 0x0, 0x6}})
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40c4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan3\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r6, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl2\x00', <r8=>r4, 0x4, 0x1, 0x3, 0x3f, 0x8, @local, @empty, 0x7800, 0x80, 0x1, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'syztnl0\x00', r8, 0x29, 0x2, 0xbe, 0x755ba5c2, 0x40, @loopback, @empty, 0x40, 0x8000, 0x7, 0x4}})
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40820000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x64}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x1091f6e8134af7f5}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xe2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000091}, 0x4010)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r5)

01:37:49 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x17}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
ioctl$SNAPSHOT_S2RAM(r3, 0x330b)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000084)
ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000340))
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x40814)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000480)=0x2, 0x4)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000004c0))
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000500)={0x9, 0x7})
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000540))
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000580))

01:37:49 executing program 0:
r0 = msgget(0x3, 0x200)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/131)
r1 = msgget(0x2, 0x20)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget(0x0, 0x40)
msgsnd(0x0, &(0x7f00000000c0)={0x2, "4c91b35078cd706ab1eee712540880a3b2dfebc82e1113b00378a8a80859b6b35eb2621be109c432d6f19d6bcc900ff5504932b74ab6d0f1ae0a57345f9bab0cb363e91b45aee5091491a0e3c358665510bf89624320f541081375ddc3100bee7b76f17649587e746e3d0d18a1470681176131300388072805b30e9182d74a6b6ce754d36b21a17fd99055bd9d9d5c91cfd7ae8633812d19a0a02edec3d208af108ab1139e89835cc685d4"}, 0xb3, 0x0)
msgrcv(r2, &(0x7f0000000180)={0x0, ""/243}, 0xfb, 0x1, 0x2000)
msgget(0x3, 0x3c1)
r3 = msgget(0x0, 0x2)
msgrcv(r3, &(0x7f0000000280)={0x0, ""/143}, 0x97, 0x0, 0x2000)
msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000340)=""/249)
r4 = msgget(0x1, 0x482)
msgrcv(r4, &(0x7f0000000440)={0x0, ""/251}, 0x103, 0x3, 0x45e8b220aa47918d)
msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000640)=""/131)

01:37:49 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/202)
r0 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/143)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil)
r1 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
r2 = getgid()
shmctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r2, 0x0, 0xffffffffffffffff, 0x13d, 0x7}, 0x101, 0x7, 0x6, 0x0, 0x0, 0x0, 0x8})
getgid()
shmctl$IPC_RMID(r1, 0x0)

01:37:49 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/202)
r0 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/143)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil)
r1 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
r2 = getgid()
shmctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x3, 0x0, r2, 0x0, 0xffffffffffffffff, 0x13d, 0x7}, 0x101, 0x7, 0x6, 0x0, 0x0, 0x0, 0x8})
shmctl$IPC_RMID(r1, 0x0)

[  183.748525] Bluetooth: hci1: command 0x0406 tx timeout
[  183.749552] Bluetooth: hci3: command 0x0406 tx timeout
[  183.750496] Bluetooth: hci4: command 0x0406 tx timeout
[  183.751428] Bluetooth: hci2: command 0x0406 tx timeout
[  183.752312] Bluetooth: hci5: command 0x0406 tx timeout
[  183.753226] Bluetooth: hci6: command 0x0406 tx timeout
[  183.754139] Bluetooth: hci0: command 0x0406 tx timeout
[  184.260375] INFO: task rcu_gp:3 blocked for more than 143 seconds.
[  184.261669]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.262611] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.263880] task:rcu_gp          state:I stack:30328 pid:3     ppid:2      flags:0x00004000
[  184.265844] Call Trace:
[  184.266659]  <TASK>
[  184.266980]  __schedule+0x893/0x2470
[  184.267549]  ? io_schedule_timeout+0x150/0x150
[  184.268173]  ? do_raw_spin_lock+0x121/0x260
[  184.268790]  ? rwlock_bug.part.0+0x90/0x90
[  184.269409]  schedule+0xda/0x1b0
[  184.269887]  rescuer_thread+0x851/0xdb0
[  184.270463]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.271148]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.271853]  ? lockdep_hardirqs_on+0x79/0x100
[  184.272495]  ? worker_thread+0x1260/0x1260
[  184.273089]  kthread+0x2ed/0x3a0
[  184.273588]  ? kthread_complete_and_exit+0x40/0x40
[  184.274257]  ret_from_fork+0x22/0x30
[  184.274844]  </TASK>
[  184.275170] INFO: task rcu_par_gp:4 blocked for more than 143 seconds.
[  184.276038]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.276777] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.277815] task:rcu_par_gp      state:I stack:30944 pid:4     ppid:2      flags:0x00004000
[  184.278940] Call Trace:
[  184.279292]  <TASK>
[  184.279645]  __schedule+0x893/0x2470
[  184.280175]  ? io_schedule_timeout+0x150/0x150
[  184.280817]  ? do_raw_spin_lock+0x121/0x260
[  184.281459]  ? rwlock_bug.part.0+0x90/0x90
[  184.282080]  schedule+0xda/0x1b0
[  184.282610]  rescuer_thread+0x851/0xdb0
[  184.283174]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.283906]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.284633]  ? lockdep_hardirqs_on+0x79/0x100
[  184.285275]  ? worker_thread+0x1260/0x1260
[  184.285900]  kthread+0x2ed/0x3a0
[  184.286417]  ? kthread_complete_and_exit+0x40/0x40
[  184.287127]  ret_from_fork+0x22/0x30
[  184.287700]  </TASK>
[  184.288033] INFO: task slub_flushwq:5 blocked for more than 143 seconds.
[  184.288966]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.289729] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.290824] task:slub_flushwq    state:I stack:30944 pid:5     ppid:2      flags:0x00004000
[  184.292005] Call Trace:
[  184.292390]  <TASK>
[  184.292724]  __schedule+0x893/0x2470
[  184.293280]  ? io_schedule_timeout+0x150/0x150
[  184.293950]  ? do_raw_spin_lock+0x121/0x260
[  184.294606]  ? rwlock_bug.part.0+0x90/0x90
[  184.295216]  schedule+0xda/0x1b0
[  184.295735]  rescuer_thread+0x851/0xdb0
[  184.296315]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.297054]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.297789]  ? lockdep_hardirqs_on+0x79/0x100
[  184.298454]  ? worker_thread+0x1260/0x1260
[  184.299080]  kthread+0x2ed/0x3a0
[  184.299598]  ? kthread_complete_and_exit+0x40/0x40
[  184.300295]  ret_from_fork+0x22/0x30
[  184.300878]  </TASK>
[  184.301210] INFO: task netns:6 blocked for more than 143 seconds.
[  184.302072]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.302849] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.303928] task:netns           state:I stack:30944 pid:6     ppid:2      flags:0x00004000
[  184.305103] Call Trace:
[  184.305496]  <TASK>
[  184.305830]  __schedule+0x893/0x2470
[  184.306411]  ? io_schedule_timeout+0x150/0x150
[  184.307075]  ? do_raw_spin_lock+0x121/0x260
[  184.307725]  ? rwlock_bug.part.0+0x90/0x90
[  184.308362]  schedule+0xda/0x1b0
[  184.308863]  rescuer_thread+0x851/0xdb0
[  184.309468]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.310180]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.310922]  ? lockdep_hardirqs_on+0x79/0x100
[  184.311590]  ? worker_thread+0x1260/0x1260
[  184.312183]  kthread+0x2ed/0x3a0
[  184.312707]  ? kthread_complete_and_exit+0x40/0x40
[  184.313435]  ret_from_fork+0x22/0x30
[  184.313987]  </TASK>
[  184.314345] INFO: task kworker/0:0:7 blocked for more than 143 seconds.
[  184.315260]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.316014] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.317101] task:kworker/0:0     state:I stack:29592 pid:7     ppid:2      flags:0x00004000
[  184.318275] Workqueue:  0x0 (rcu_gp)
[  184.318849] Call Trace:
[  184.319207]  <TASK>
[  184.319563]  __schedule+0x893/0x2470
[  184.320104]  ? io_schedule_timeout+0x150/0x150
[  184.320798]  schedule+0xda/0x1b0
[  184.321286]  worker_thread+0x15f/0x1260
[  184.321904]  ? process_one_work+0x16a0/0x16a0
[  184.322594]  kthread+0x2ed/0x3a0
[  184.323088]  ? kthread_complete_and_exit+0x40/0x40
[  184.323810]  ret_from_fork+0x22/0x30
[  184.324380]  </TASK>
[  184.324715] INFO: task kworker/0:0H:8 blocked for more than 143 seconds.
[  184.325655]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.326416] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.327494] task:kworker/0:0H    state:I stack:28952 pid:8     ppid:2      flags:0x00004000
[  184.328654] Workqueue:  0x0 (kblockd)
[  184.329192] Call Trace:
[  184.329581]  <TASK>
[  184.329912]  __schedule+0x893/0x2470
[  184.330483]  ? io_schedule_timeout+0x150/0x150
[  184.331159]  schedule+0xda/0x1b0
[  184.331656]  worker_thread+0x15f/0x1260
[  184.332227]  ? process_one_work+0x16a0/0x16a0
[  184.332873]  kthread+0x2ed/0x3a0
[  184.333367]  ? kthread_complete_and_exit+0x40/0x40
[  184.334038]  ret_from_fork+0x22/0x30
[  184.334658]  </TASK>
[  184.334990] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds.
[  184.335899]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.336618] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.337641] task:mm_percpu_wq    state:I stack:30944 pid:10    ppid:2      flags:0x00004000
[  184.338771] Call Trace:
[  184.339121]  <TASK>
[  184.339465]  __schedule+0x893/0x2470
[  184.339996]  ? io_schedule_timeout+0x150/0x150
[  184.340640]  ? do_raw_spin_lock+0x121/0x260
[  184.341239]  ? rwlock_bug.part.0+0x90/0x90
[  184.341852]  schedule+0xda/0x1b0
[  184.342357]  rescuer_thread+0x851/0xdb0
[  184.342920]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.343635]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.344358]  ? lockdep_hardirqs_on+0x79/0x100
[  184.345002]  ? worker_thread+0x1260/0x1260
[  184.345639]  kthread+0x2ed/0x3a0
[  184.346131]  ? kthread_complete_and_exit+0x40/0x40
[  184.346873]  ret_from_fork+0x22/0x30
[  184.347454]  </TASK>
[  184.347791] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds.
[  184.348779]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.349538] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.350619] task:rcu_tasks_kthre state:I stack:29272 pid:11    ppid:2      flags:0x00004000
[  184.351798] Call Trace:
[  184.352163]  <TASK>
[  184.352519]  __schedule+0x893/0x2470
[  184.353070]  ? io_schedule_timeout+0x150/0x150
[  184.353744]  ? mark_held_locks+0x9e/0xe0
[  184.354353]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.355100]  schedule+0xda/0x1b0
[  184.355627]  rcu_tasks_one_gp+0x3db/0xc10
[  184.356243]  rcu_tasks_kthread+0x80/0xa0
[  184.356848]  ? rcu_tasks_postscan+0x10/0x10
[  184.357482]  kthread+0x2ed/0x3a0
[  184.357969]  ? kthread_complete_and_exit+0x40/0x40
[  184.358698]  ret_from_fork+0x22/0x30
[  184.359246]  </TASK>
[  184.359616] INFO: task kworker/1:0H:21 blocked for more than 143 seconds.
[  184.360570]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.361305] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.362390] task:kworker/1:0H    state:I stack:29760 pid:21    ppid:2      flags:0x00004000
[  184.363570] Workqueue:  0x0 (events_highpri)
[  184.364198] Call Trace:
[  184.364589]  <TASK>
[  184.364925]  __schedule+0x893/0x2470
[  184.365506]  ? io_schedule_timeout+0x150/0x150
[  184.366177]  schedule+0xda/0x1b0
[  184.366730]  worker_thread+0x15f/0x1260
[  184.367350]  ? process_one_work+0x16a0/0x16a0
[  184.368001]  kthread+0x2ed/0x3a0
[  184.368523]  ? kthread_complete_and_exit+0x40/0x40
[  184.369221]  ret_from_fork+0x22/0x30
[  184.369799]  </TASK>
[  184.370138] INFO: task inet_frag_wq:23 blocked for more than 143 seconds.
[  184.371101]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.371851] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.372929] task:inet_frag_wq    state:I stack:30704 pid:23    ppid:2      flags:0x00004000
[  184.374111] Call Trace:
[  184.374504]  <TASK>
[  184.374854]  __schedule+0x893/0x2470
[  184.375433]  ? io_schedule_timeout+0x150/0x150
[  184.376078]  ? do_raw_spin_lock+0x121/0x260
[  184.376732]  ? rwlock_bug.part.0+0x90/0x90
[  184.377380]  schedule+0xda/0x1b0
[  184.377876]  rescuer_thread+0x851/0xdb0
[  184.378479]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.379190]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.379934]  ? lockdep_hardirqs_on+0x79/0x100
[  184.380605]  ? worker_thread+0x1260/0x1260
[  184.381208]  kthread+0x2ed/0x3a0
[  184.381730]  ? kthread_complete_and_exit+0x40/0x40
[  184.382449]  ret_from_fork+0x22/0x30
[  184.383029]  </TASK>
[  184.383484] 
[  184.383484] Showing all locks held in the system:
[  184.384355] 1 lock held by rcu_tasks_kthre/11:
[  184.384983]  #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10
[  184.386353] 1 lock held by khungtaskd/25:
[  184.386934]  #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260
[  184.388210] 1 lock held by in:imklog/200:
[  184.388807] 3 locks held by syz-executor/4392:
[  184.389468] 
[  184.389711] =============================================
[  184.389711] 
01:38:01 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x17}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
ioctl$SNAPSHOT_S2RAM(r3, 0x330b)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000084)
ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000340))
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x40814)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000480)=0x2, 0x4)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000004c0))
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000500)={0x9, 0x7})
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000540))

01:38:01 executing program 2:
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000040)={0x2d4, 0x12, 0x100, 0x70bd29, 0x25dfdbff, {0x25, 0x80, 0x2e, 0x4, {0x4e23, 0x4e21, [0x2a8, 0x2, 0xda1f, 0x2], [0x9, 0x1, 0x9, 0x4], 0x0, [0x7475, 0x4]}, 0xfffffff7, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x96, 0x1, "7301d28460a76c8cdeb683501fa4688fbfc730a0f1c5dcbadc10f8bcb8ef168d044ee9537d107b29ca455c05c52e98b7e90abe84c0d754849412cdcd56e73c37b5200fb16ae4c4810077f9e9426aa460b7baa29c2ac904ec42603c1779a12b6341b1270b2cdadc20e5ffc24e9817b7a24a407feff52079d1dbe16c9c1442e0a7660feb1a9eaafe5f5cfe606c7649a5c12d21"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "a5370170de9779a2cb187718f31ae0bcd5937772c88528f1eac519fec8706cc38244d546a2556b3b0f5f8eca302c18ef7cc0448431201f1287fdb1791db9aa1f8090e7d8e62eb5098ea88cbb42afc70cc021e15bea400bca56874cd0836f02f3a39004cc9dcc9c78515d4f"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "f6d621224588038afe5585a8a9899a6a6760fc7ee39c026993a8398ada7c37652c4ab4430c08812df70c7b07c43cac256fae94f3971e64590966915da692a75f8cbbbbe55aabbd69f026ee6c2372b7672506e0b9fc93ac461473f27704608cad777b906ba368462aa63bd8bb4c208130eedb111191c972ab5b741c3072e81adf8d118e35aa5430496adc147ddc1625e44096201a2dcdb71c01b1d2e1fe7f3a9868a30a2dfbc3a40b6e4ce9c419402be3fe2ac268acfb311f792c618c675be9060534d774acadbdb89938d1f834a5eb7b8abc76b919"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "4315ba3bcf2e121c28226f4b0b79d0ee6365a6f521fca5f7ec00ab81df037e6a83119e618fbce57f1c2be9324b99e238fcafe525ced034300cd1ff34293863025ceb9b54e4c11590ea3cf8b89c879cf936dbb3ea76fc80c878a7ef56bb34e640b9d5d798d4b33b530c7358f737d451ada60d88f4772bb338aa40ed1ebe3b748695d9b0516dea762584228c527377b564b854bf3c9ca633338081316d9514"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4048001}, 0x48000)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', <r1=>0x0, 0x2f, 0x7f, 0x5, 0x800, 0x22, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x700, 0x1, 0x8aec, 0x80}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000500)=""/229, &(0x7f0000000600)=0xe5)
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f00000006c0)={&(0x7f0000000680)="42dea9fde8730c58586a09847145de08046aafbcc97a29d880d920a9eba95487c74b6d92145eeb4e", 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x28000)
msgget(0x3, 0x80)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'sit0\x00', <r4=>r1, 0x4, 0x40, 0xff, 0x6e, 0x80, @private0, @private0, 0x737, 0x80, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'syztnl1\x00', <r5=>r4, 0x4, 0x2, 0x80, 0x9, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x20, 0x2, 0x5}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl1\x00', r5, 0x29, 0x0, 0x80, 0x1, 0x0, @remote, @mcast2, 0x40, 0x7, 0xbca, 0x6}})
ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000980)={0x4, 0x21, "e9afd31e2fdfbf924ae149d654bfb64e95c82e5b915545770d90a14b637aa481bd"})
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc}]}, 0x38}}, 0x10)
sendto$packet(0xffffffffffffffff, &(0x7f00000010c0)="64629d6c122945b500338052a018c3512615bc7a7755bb6f524d69f4f633d68452a4ccfcc71032c5319ecd88b4d413a9b513ff41e9d267596b462ffeb53945a16e58c0a3d95283522e969dfab0cbb06b899439bd03902ed9b5a0407e93051eeac26de1c357984966ee314d0e38e94d5ec8896c0165a50ed80dd5ddaabfc06d5ee0be1a3a1f31de23f9", 0x89, 0xc0, &(0x7f0000001180)={0x11, 0xf7, r5, 0x1, 0x1}, 0x14)

01:38:01 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/202)
r0 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/143)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil)
r1 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
getgid()
shmctl$IPC_RMID(r1, 0x0)

01:38:01 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000050)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4050)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x44d}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044094)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', <r2=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004894}, 0x4041041)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'sit0\x00', <r4=>0x0, 0x4, 0x3, 0x7f, 0x6, 0x46, @private0, @mcast1, 0x40, 0x8000, 0x0, 0x6}})
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40c4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan3\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r6, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl2\x00', <r8=>r4, 0x4, 0x1, 0x3, 0x3f, 0x8, @local, @empty, 0x7800, 0x80, 0x1, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'syztnl0\x00', r8, 0x29, 0x2, 0xbe, 0x755ba5c2, 0x40, @loopback, @empty, 0x40, 0x8000, 0x7, 0x4}})
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40820000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x64}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x1091f6e8134af7f5}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xe2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000091}, 0x4010)

01:38:01 executing program 0:
r0 = msgget(0x3, 0x200)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/131)
r1 = msgget(0x2, 0x20)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget(0x0, 0x40)
msgsnd(0x0, &(0x7f00000000c0)={0x2, "4c91b35078cd706ab1eee712540880a3b2dfebc82e1113b00378a8a80859b6b35eb2621be109c432d6f19d6bcc900ff5504932b74ab6d0f1ae0a57345f9bab0cb363e91b45aee5091491a0e3c358665510bf89624320f541081375ddc3100bee7b76f17649587e746e3d0d18a1470681176131300388072805b30e9182d74a6b6ce754d36b21a17fd99055bd9d9d5c91cfd7ae8633812d19a0a02edec3d208af108ab1139e89835cc685d4"}, 0xb3, 0x0)
msgrcv(r2, &(0x7f0000000180)={0x0, ""/243}, 0xfb, 0x1, 0x2000)
msgget(0x3, 0x3c1)
r3 = msgget(0x0, 0x2)
msgrcv(r3, &(0x7f0000000280)={0x0, ""/143}, 0x97, 0x0, 0x2000)
msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000340)=""/249)
msgget(0x1, 0x482)
msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000640)=""/131)

01:38:01 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0x8)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x7f, 0x6, 0xfe13}]}, 0x10)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000100))
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x4c000)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0)
write$rfkill(r2, &(0x7f00000002c0)={0x7, 0x7, 0x2, 0x0, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
pipe2(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000380))
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0x54, 0x9, 0x1, 0x10, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8000, 0x4}})
bind$bt_sco(r3, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
write$rfkill(r4, &(0x7f00000004c0)={0x81, 0x9, 0x2}, 0x8)
openat$cgroup(r4, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0)

01:38:01 executing program 6:
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x1, 0x1, 0x0, 0x1}, 0x8)
write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4, 0x0, 0x0, 0x1}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6tnl0\x00', <r0=>0x0, 0x2f, 0x4, 0x0, 0xffff, 0x42, @dev={0xfe, 0x80, '\x00', 0xe}, @local, 0x700, 0x8, 0x472, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r1=>r0, 0x4, 0x2, 0x2, 0x180, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0xfffffffa, 0xad}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', r1, 0x4, 0x80, 0x5, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8, 0x3f, 0x8}})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'sit0\x00', <r5=>r4, 0x2f, 0x8, 0x81, 0x8, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20, 0x5587af27e26f0b5, 0xffffffff, 0xfffffff8}})
add_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="744a01aae0d9fe10ee8b83ad4bf1b466b86397a457cc521dcb90ae252be39c044276e2e20d97dee29bcb405d2bf95c23937aa63f6c32a63d9d29dd27c51ba6bf5f028f4aad937be9dc068a0626a9ca9215cfce2c4232130e8d1bb023de0a056a7d422007f276cf358ac5e6fcadb1ece7327851af4ed9a49af6ce5b597de918a819af56d4a8c788f6be7f49d25aad9bde05a0c645d79c63726a524d149b9bb4e9d040200bfca670704befd5cf29fbf035e87c0573baa357db861473f63ee69305dc9e16bf11de02a2022429af5e262106a0", 0xd1, 0xfffffffffffffffd)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl2\x00', r5, 0x29, 0x8, 0x7, 0x3ff, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8, 0x70f, 0x6, 0x4}})
r7 = accept4$packet(r3, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14, 0x800)
getpeername$packet(r7, &(0x7f00000006c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14)
bind$packet(r7, &(0x7f0000000740)={0x11, 0x17, r8, 0x1, 0x9, 0x6, @random="728697b1a5c2"}, 0x14)
pipe2(&(0x7f0000000840)={<r9=>0xffffffffffffffff}, 0x0)
write$rfkill(r9, &(0x7f0000000880)={0x8, 0x0, 0x2, 0x0, 0x1}, 0x8)

01:38:01 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket(0x2, 0x80000, 0x101)
pipe2(&(0x7f00000000c0)={<r4=>0xffffffffffffffff}, 0x800)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf41}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8010}, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_DELPDP(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x40080)
pipe2(&(0x7f0000000400)={<r7=>0xffffffffffffffff}, 0x4000)
getsockopt$bt_sco_SCO_CONNINFO(r7, 0x11, 0x2, &(0x7f0000000440)=""/255, &(0x7f0000000540)=0xff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan4\x00', <r10=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x408004}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_PHY(r11, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x6)

01:38:01 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x17}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
ioctl$SNAPSHOT_S2RAM(r3, 0x330b)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000084)
ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000340))
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x40814)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000480)=0x2, 0x4)
ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000004c0))
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000500)={0x9, 0x7})

01:38:01 executing program 0:
r0 = msgget(0x3, 0x200)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/131)
r1 = msgget(0x2, 0x20)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget(0x0, 0x40)
msgsnd(0x0, &(0x7f00000000c0)={0x2, "4c91b35078cd706ab1eee712540880a3b2dfebc82e1113b00378a8a80859b6b35eb2621be109c432d6f19d6bcc900ff5504932b74ab6d0f1ae0a57345f9bab0cb363e91b45aee5091491a0e3c358665510bf89624320f541081375ddc3100bee7b76f17649587e746e3d0d18a1470681176131300388072805b30e9182d74a6b6ce754d36b21a17fd99055bd9d9d5c91cfd7ae8633812d19a0a02edec3d208af108ab1139e89835cc685d4"}, 0xb3, 0x0)
msgrcv(r2, &(0x7f0000000180)={0x0, ""/243}, 0xfb, 0x1, 0x2000)
msgget(0x3, 0x3c1)
r3 = msgget(0x0, 0x2)
msgrcv(r3, &(0x7f0000000280)={0x0, ""/143}, 0x97, 0x0, 0x2000)
msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000340)=""/249)
msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000640)=""/131)

01:38:01 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/202)
r0 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/143)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil)
r1 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
shmctl$IPC_RMID(r1, 0x0)

01:38:02 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
read$rfkill(r0, &(0x7f0000000040), 0x8)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0, 0x7f, 0x6, 0xfe13}]}, 0x10)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000100))
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000811}, 0x4c000)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0)
write$rfkill(r2, &(0x7f00000002c0)={0x7, 0x7, 0x2, 0x0, 0x1}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
pipe2(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x800)
ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000380))
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0x54, 0x9, 0x1, 0x10, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x8000, 0x4}})
bind$bt_sco(r3, &(0x7f0000000480)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8)
openat$cgroup(r4, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0)

01:38:02 executing program 7:
shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/202)
r0 = shmget(0x2, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/143)
shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffb000/0x1000)=nil)
r1 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmctl$IPC_RMID(r1, 0x0)

01:38:02 executing program 0:
r0 = msgget(0x3, 0x200)
msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/131)
r1 = msgget(0x2, 0x20)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget(0x0, 0x40)
msgsnd(0x0, &(0x7f00000000c0)={0x2, "4c91b35078cd706ab1eee712540880a3b2dfebc82e1113b00378a8a80859b6b35eb2621be109c432d6f19d6bcc900ff5504932b74ab6d0f1ae0a57345f9bab0cb363e91b45aee5091491a0e3c358665510bf89624320f541081375ddc3100bee7b76f17649587e746e3d0d18a1470681176131300388072805b30e9182d74a6b6ce754d36b21a17fd99055bd9d9d5c91cfd7ae8633812d19a0a02edec3d208af108ab1139e89835cc685d4"}, 0xb3, 0x0)
msgrcv(r2, &(0x7f0000000180)={0x0, ""/243}, 0xfb, 0x1, 0x2000)
msgget(0x3, 0x3c1)
r3 = msgget(0x0, 0x2)
msgrcv(r3, &(0x7f0000000280)={0x0, ""/143}, 0x97, 0x0, 0x2000)
msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000640)=""/131)

01:38:02 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040))
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x17}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0)
ioctl$SNAPSHOT_S2RAM(r3, 0x330b)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000084)
ioctl$SNAPSHOT_CREATE_IMAGE(r1, 0x40043311, &(0x7f0000000340))
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3e}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x40814)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000480)=0x2, 0x4)
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000500)={0x9, 0x7})

01:38:02 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000050)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4050)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x103}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x44d}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044094)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', <r2=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004894}, 0x4041041)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'sit0\x00', <r4=>0x0, 0x4, 0x3, 0x7f, 0x6, 0x46, @private0, @mcast1, 0x40, 0x8000, 0x0, 0x6}})
sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x40c4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r0)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000880)={'wpan3\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, r6, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl2\x00', <r8=>r4, 0x4, 0x1, 0x3, 0x3f, 0x8, @local, @empty, 0x7800, 0x80, 0x1, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'syztnl0\x00', r8, 0x29, 0x2, 0xbe, 0x755ba5c2, 0x40, @loopback, @empty, 0x40, 0x8000, 0x7, 0x4}})
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40820000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x64}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x1091f6e8134af7f5}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xe2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000091}, 0x4010)

[  191.940426] Bluetooth: hci7: command 0x0406 tx timeout

VM DIAGNOSIS:
01:38:01  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=1ffff11007040f63 RCX=1ffffffff0a1e514 RDX=0000000000000001
RSI=ffffffff849ec7c0 RDI=ffffffff849ec800 RBP=0000000000000001 RSP=ffff888038207ac8
R8 =0000000000000000 R9 =ffffffff85b06ed7 R10=fffffbfff0b60dda R11=0000000000000001
R12=0000000000000001 R13=0000000000000000 R14=ffff88800c1c4888 R15=0000000000000000
RIP=ffffffff842540e2 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555561f1400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000558a6c7b7648 CR3=0000000035b26000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 00000000ff000000 0000000000000000
YMM01=0000000000000000 0000000000000000 636f6c63006b6165 6c6d656d6b2f6775
YMM02=0000000000000000 0000000000000000 0000000000ffffff ff00000000000000
YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898
R8 =0000000000000001 R9 =000000000000000a R10=000000000000002e R11=0000000000000001
R12=000000000000002e R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0
RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f88010dea80 CR3=0000000019ec0000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 000c016c6c6f502e 726567616e614d0c
YMM02=0000000000000000 0000000000000000 0000008c0000007f 0000005200000000
YMM03=0000000000000000 0000000000000000 0000008d0000008d 0000008c0000008c
YMM04=0000000000000000 0000000000000000 6c6f502e72656761 6e614d0c0182ff13
YMM05=0000000000000000 0000000000000000 636578650b006574 616469646e616320
YMM06=0000000000000000 0000000000000000 696820636578650a 0065676169727420
YMM07=0000000000000000 0000000000000000 0c6c61746f742063 6578650a0073746e
YMM08=0000000000000000 0000000000000000 206365786509006e 6567206365786508
YMM09=0000000000000000 0000000000000000 7364656573206365 78650a007a7a7566
YMM10=0000000000000000 0000000000000000 617473657220726f 7475636578651100
YMM11=0000000000000000 0000000000000000 696d696e696d2063 6578650d00737472
YMM12=0000000000000000 0000000000000000 00006873616d7320 636578650a0c657a
YMM13=0000000000000000 0000000000000000 3066377830282628 3435313230386565
YMM14=0000000000000000 0000000000000000 66667830202c2930 3430303030303030
YMM15=0000000000000000 0000000000000000 0a29666666666666 6666666666666666