r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x80000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xa) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom(r3, &(0x7f0000000080)=""/108, 0x6c, 0x0, &(0x7f0000000100)=@llc={0x1a, 0x325, 0x3f, 0x1, 0x8, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r4, 0x0, &(0x7f0000000180), 0x80000) r5 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) mount_setattr(0xffffffffffffffff, &(0x7f00000001c0)='.\x00', 0x0, &(0x7f0000000240)={0x0, 0x100000, 0xc0000, {r5}}, 0x20) getcwd(&(0x7f0000000280)=""/28, 0x1c) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd580}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x4001) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xb) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r6) keyctl$join(0x1, &(0x7f00000003c0)={'syz', 0x1})