x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:05:23 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, 0x0) 04:05:23 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:05:23 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x0, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:05:23 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:05:23 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:05:23 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, 0x0) 04:05:23 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:05:23 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:05:23 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, 0x0) 04:05:23 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:05:23 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:05:23 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:05:23 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:05:38 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:05:38 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:05:38 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:05:38 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:05:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:05:38 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x0, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:05:38 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, 0x0) 04:05:38 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:05:38 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:05:38 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, 0x0) 04:05:38 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:05:38 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:05:38 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:05:38 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:05:38 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:05:50 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:05:50 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:05:50 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:05:50 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:05:50 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:05:50 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, 0x0) 04:05:50 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:05:50 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:05:50 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, 0x0) 04:05:50 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:05:50 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:05:50 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:05:50 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) 04:05:50 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:05:50 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:05:50 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:05:50 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:05:50 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) 04:06:03 executing program 7: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) 04:06:03 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:03 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:06:03 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:03 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:06:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x40) 04:06:03 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:03 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:06:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x40) 04:06:03 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:06:03 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:03 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:03 executing program 1: prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:06:03 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:14 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:06:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x40) 04:06:14 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:14 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) 04:06:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x40) 04:06:14 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:06:14 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:15 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x40) 04:06:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:06:15 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) 04:06:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x40) 04:06:15 executing program 6: prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:06:15 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:06:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:06:15 executing program 6: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) 04:06:15 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:15 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) 04:06:15 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x0, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:15 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:15 executing program 6: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) 04:06:26 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) 04:06:26 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x0, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:26 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:26 executing program 6: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) 04:06:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:06:26 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:06:26 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:26 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:26 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x0, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:26 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:26 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:06:26 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:27 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:06:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:06:44 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:44 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x0, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:44 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:44 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:06:44 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:44 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:44 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:06:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:06:44 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:06:44 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:06:55 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:55 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:55 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:55 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:06:55 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:55 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:06:55 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:06:55 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:55 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:55 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:06:55 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:55 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:06:55 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:55 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:06:55 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:06:55 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:06:55 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:06:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:06:56 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:08 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:07:08 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:08 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:08 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x0, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:08 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:08 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:08 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:08 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:08 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x0, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:08 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:08 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:08 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:08 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:07:22 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:07:22 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:22 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:22 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:22 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x0, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x40) 04:07:22 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x0, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:22 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) 04:07:35 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:35 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:35 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:35 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 04:07:35 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:07:35 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:35 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x0, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:35 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:07:35 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:07:35 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:35 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:35 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:35 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) 04:07:35 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 04:07:35 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:35 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:35 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:35 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:35 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:07:35 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:35 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:47 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:47 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:47 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:07:47 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:47 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:47 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:47 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:47 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) 04:07:47 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:47 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:47 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:07:47 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) 04:07:47 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:47 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:47 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:47 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:47 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:07:59 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:59 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:59 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:07:59 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) socket$nl_generic(0x10, 0x3, 0x10) 04:07:59 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:59 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:59 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:07:59 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:07:59 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) socket$nl_generic(0x10, 0x3, 0x10) 04:07:59 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:59 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:07:59 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:07:59 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:07:59 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:08:13 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:08:13 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) socket$nl_generic(0x10, 0x3, 0x10) 04:08:13 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:08:13 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:13 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:13 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:08:13 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:13 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:08:13 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) socket$nl_generic(0x10, 0x3, 0x10) 04:08:13 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:08:13 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:13 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:13 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) socket$nl_generic(0x10, 0x3, 0x10) 04:08:13 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:08:13 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:08:13 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:13 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:08:14 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:26 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:26 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$nl_generic(0x10, 0x3, 0x10) 04:08:26 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) 04:08:26 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:26 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:26 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:08:26 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:26 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:08:26 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) 04:08:40 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) 04:08:40 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:40 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:40 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) 04:08:40 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:08:40 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:08:40 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:40 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:40 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) 04:08:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:08:40 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:08:40 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:40 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:40 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 04:08:40 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:40 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) 04:08:40 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:08:40 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:08:40 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:40 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:40 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 04:08:40 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:40 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:08:40 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:53 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:53 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) socket$nl_generic(0x10, 0x3, 0x10) 04:08:53 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:53 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:08:53 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:53 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) 04:08:53 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:08:53 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:08:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x40) 04:08:53 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', 0x0}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:08:53 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) socket$nl_generic(0x10, 0x3, 0x10) 04:08:53 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:05 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', 0x0}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:09:05 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:05 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:05 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) socket$nl_generic(0x10, 0x3, 0x10) 04:09:05 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) 04:09:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x40) 04:09:05 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:05 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:05 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) 04:09:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x40) 04:09:05 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) socket$nl_generic(0x10, 0x3, 0x10) 04:09:05 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) 04:09:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:09:05 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:16 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) 04:09:16 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:16 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:16 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:09:16 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:16 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', 0x0}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:09:16 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 04:09:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:09:16 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) 04:09:16 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 04:09:16 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:09:16 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', 0x0}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:09:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:09:16 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:16 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) 04:09:16 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:09:28 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 04:09:28 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 04:09:28 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) 04:09:28 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) 04:09:28 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:28 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:09:28 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:09:28 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:09:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:09:28 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) 04:09:28 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 04:09:28 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:09:28 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) 04:09:28 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:09:28 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:09:39 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 04:09:39 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:09:39 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:09:39 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:09:39 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:39 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:09:39 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:09:39 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 04:09:39 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:09:39 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:09:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:09:39 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:09:39 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:52 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:52 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:09:52 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:09:52 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 04:09:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:09:52 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:52 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 04:09:52 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x40) 04:09:52 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:09:52 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:09:52 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 04:09:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) 04:09:52 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:52 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:09:52 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:09:52 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 04:09:52 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:09:52 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:09:52 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:52 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:09:52 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:09:52 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:10:05 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:05 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:10:05 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:10:05 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:10:05 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:10:05 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:10:05 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 04:10:05 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 04:10:05 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 04:10:05 executing program 1: syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:05 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:17 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 04:10:17 executing program 0: syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:17 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x0, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:10:17 executing program 1: syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:17 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:10:17 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 04:10:17 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 04:10:17 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:10:17 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 04:10:17 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:10:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) 04:10:17 executing program 1: syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:17 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 04:10:17 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x0, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:10:30 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x0, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:10:30 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x0, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:10:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:10:30 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:30 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:10:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) 04:10:30 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 04:10:30 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 04:10:30 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) 04:10:30 executing program 7: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:30 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 04:10:30 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 04:10:31 executing program 2: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) 04:10:31 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:31 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:10:42 executing program 0: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:42 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:10:42 executing program 5: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:42 executing program 7: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:42 executing program 6: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:42 executing program 2: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) 04:10:42 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:10:42 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:42 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 04:10:42 executing program 7: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:42 executing program 0: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:42 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:42 executing program 5: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:42 executing program 2: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) 04:10:42 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:10:42 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:10:42 executing program 7: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:10:42 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:10:55 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x0, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:10:55 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:10:55 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:55 executing program 5: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:55 executing program 0: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) 04:10:55 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:10:55 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x0, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:10:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) 04:10:55 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:10:55 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:10:55 executing program 5: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:10:55 executing program 0: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:10:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) 04:11:08 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) 04:11:08 executing program 0: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:08 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x0, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:11:08 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:08 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x0, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:11:08 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:11:08 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:11:08 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:11:09 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:09 executing program 7: syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:09 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) 04:11:09 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:11:20 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:20 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:11:20 executing program 7: syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:20 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x0, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:11:20 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x0, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:11:20 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:11:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) 04:11:20 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:21 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 04:11:21 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 04:11:21 executing program 5: syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:21 executing program 7: syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 04:11:21 executing program 7: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:21 executing program 0: syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:21 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:11:21 executing program 5: syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:21 executing program 6: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 04:11:21 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:11:21 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 04:11:21 executing program 0: syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:21 executing program 7: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 04:11:34 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:11:34 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:11:34 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 04:11:34 executing program 5: syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:34 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x0, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:11:34 executing program 7: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:34 executing program 0: syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:34 executing program 5: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 04:11:34 executing program 0: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:47 executing program 7: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:47 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:11:47 executing program 0: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:47 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:11:47 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:11:47 executing program 5: syz_io_uring_setup(0x6edb, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:47 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:11:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 04:11:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 04:11:47 executing program 7: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:47 executing program 0: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:47 executing program 5: syz_io_uring_setup(0x6edb, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) 04:11:47 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:11:47 executing program 7: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:11:47 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:11:47 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:11:47 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 04:12:01 executing program 6: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:12:01 executing program 5: syz_io_uring_setup(0x6edb, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) 04:12:01 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:12:01 executing program 0: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:12:01 executing program 7: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:12:01 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) socket$unix(0x1, 0x1, 0x0) 04:12:01 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:12:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) 04:12:01 executing program 0: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:12:01 executing program 6: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:12:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) 04:12:01 executing program 7: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) 04:12:01 executing program 5: syz_io_uring_setup(0x6edb, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) 04:12:02 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) socket$unix(0x1, 0x1, 0x0) 04:12:02 executing program 0: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) 04:12:02 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:12:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) 04:12:16 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:12:16 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) socket$unix(0x1, 0x1, 0x0) 04:12:16 executing program 7: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) 04:12:16 executing program 6: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:12:16 executing program 5: syz_io_uring_setup(0x6edb, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:12:16 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:12:16 executing program 0: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) 04:12:16 executing program 7: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) 04:12:16 executing program 0: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) 04:12:16 executing program 6: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:12:16 executing program 2: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:12:16 executing program 5: syz_io_uring_setup(0x6edb, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:12:16 executing program 0: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:12:16 executing program 7: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:12:16 executing program 2: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:12:16 executing program 5: syz_io_uring_setup(0x6edb, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:12:16 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:12:16 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:12:16 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x0, 0x0) 04:12:27 executing program 6: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:12:27 executing program 7: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:12:27 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:12:27 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:12:27 executing program 2: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:12:27 executing program 0: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:12:27 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x0, 0x0) 04:12:27 executing program 5: syz_io_uring_setup(0x6edb, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:12:27 executing program 5: syz_io_uring_setup(0x6edb, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:12:28 executing program 6: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:12:28 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:12:28 executing program 0: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:12:28 executing program 7: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:12:28 executing program 5: syz_io_uring_setup(0x6edb, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:12:28 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:12:28 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:12:40 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:12:40 executing program 5: syz_io_uring_setup(0x6edb, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:12:40 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x0, 0x0) 04:12:40 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:12:40 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:12:40 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:12:40 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:12:40 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:12:40 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x0, 0x0) 04:12:40 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:12:40 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) socket$unix(0x1, 0x1, 0x0) 04:12:40 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:12:40 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:12:40 executing program 6: syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:12:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x40) 04:12:52 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:12:52 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', 0x0}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:12:52 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:12:52 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x0, 0x0) 04:12:52 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:12:52 executing program 6: syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:12:52 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) 04:12:52 executing program 6: syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:12:52 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) 04:12:52 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) 04:13:05 executing program 6: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:13:05 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:05 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) 04:13:05 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:05 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) 04:13:05 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:05 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:05 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:05 executing program 6: syz_io_uring_setup(0x6edb, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:13:05 executing program 1: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:13:05 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) 04:13:05 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:06 executing program 6: syz_io_uring_setup(0x6edb, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:13:06 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:06 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:06 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:06 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:13:06 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) 04:13:06 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) 04:13:06 executing program 6: syz_io_uring_setup(0x6edb, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:13:06 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:13:17 executing program 6: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) 04:13:17 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:17 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:13:17 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:17 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:17 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:17 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:13:17 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:17 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:13:17 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:30 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:13:30 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:13:30 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:30 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:30 executing program 6: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) 04:13:30 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:30 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:30 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:13:30 executing program 6: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) 04:13:30 executing program 3: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:13:30 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) socket$nl_generic(0x10, 0x3, 0x10) 04:13:30 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) socket$nl_generic(0x10, 0x3, 0x10) 04:13:30 executing program 6: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:13:30 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:30 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) socket$nl_generic(0x10, 0x3, 0x10) 04:13:30 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:13:30 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:13:30 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) socket$nl_generic(0x10, 0x3, 0x10) 04:13:30 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:13:30 executing program 6: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:13:30 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:41 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 04:13:41 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:41 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 04:13:41 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:13:41 executing program 6: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:13:41 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:13:41 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) socket$nl_generic(0x10, 0x3, 0x10) 04:13:41 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:42 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:13:42 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:13:42 executing program 2: syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:13:42 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:42 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:13:42 executing program 3: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:13:42 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:54 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:13:54 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) 04:13:54 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:13:54 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) 04:13:54 executing program 3: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:13:54 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:54 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:54 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:54 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:13:54 executing program 3: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:13:54 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:54 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:13:54 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:13:54 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x0, 0x0) 04:13:54 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:13:54 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) 04:14:07 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:14:07 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:14:07 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:14:07 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:07 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) 04:14:07 executing program 3: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:07 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) socket$unix(0x1, 0x0, 0x0) 04:14:07 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:14:07 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:07 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8000) 04:14:07 executing program 3: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:07 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:14:07 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:14:07 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:07 executing program 6: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:07 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x0, 0x0) 04:14:07 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:14:20 executing program 3: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:20 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) 04:14:20 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:14:20 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) socket$unix(0x1, 0x0, 0x0) 04:14:20 executing program 6: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:20 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:14:20 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:14:20 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:20 executing program 6: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:20 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:14:20 executing program 3: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:20 executing program 6: syz_io_uring_setup(0x0, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:20 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:14:20 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) 04:14:20 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) 04:14:31 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:14:31 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:14:31 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) 04:14:31 executing program 3: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:31 executing program 6: syz_io_uring_setup(0x0, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:14:31 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) socket$unix(0x1, 0x0, 0x0) 04:14:31 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:14:31 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:14:31 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) 04:14:31 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:14:31 executing program 6: syz_io_uring_setup(0x0, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, 0x0) 04:14:31 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:14:31 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) 04:14:31 executing program 3: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:31 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) socket$unix(0x1, 0x0, 0x0) 04:14:31 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:14:31 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:31 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:14:32 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:14:32 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:14:32 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:32 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) socket$unix(0x1, 0x0, 0x0) 04:14:32 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:14:32 executing program 3: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:45 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:14:45 executing program 3: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:14:45 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:14:45 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:45 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:45 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$unix(0x1, 0x0, 0x0) 04:14:45 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:14:45 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:14:45 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:45 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:14:45 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:14:45 executing program 3: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:14:45 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$unix(0x1, 0x0, 0x0) 04:14:57 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:14:57 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) socket$unix(0x1, 0x0, 0x0) 04:14:57 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:14:57 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:14:57 executing program 3: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:14:57 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:14:57 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:14:57 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$unix(0x1, 0x0, 0x0) 04:14:57 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) 04:15:08 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:08 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$unix(0x1, 0x0, 0x0) 04:15:08 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:15:08 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) socket$unix(0x1, 0x0, 0x0) 04:15:08 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:08 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:08 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:08 executing program 3: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:15:08 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:08 executing program 3: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:15:08 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) socket$unix(0x1, 0x0, 0x0) 04:15:08 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:08 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:08 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:08 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:08 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) socket$unix(0x1, 0x0, 0x0) 04:15:08 executing program 3: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:15:08 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:21 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:21 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:21 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:21 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:21 executing program 1: socket$unix(0x1, 0x0, 0x0) 04:15:21 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:21 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:21 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:21 executing program 7: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:21 executing program 7: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:21 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:21 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:21 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x0, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:21 executing program 7: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:21 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:21 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:21 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:21 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:21 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:21 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:21 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0xa, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:33 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:33 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:33 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:33 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:33 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:33 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:33 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:33 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:33 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:33 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:33 executing program 6: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:33 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:33 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:45 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:15:45 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:45 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:15:45 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:45 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x0, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:45 executing program 6: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:45 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:15:45 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x0, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:45 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:15:45 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:15:45 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x0, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:45 executing program 6: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:45 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:45 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:45 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:45 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:45 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:15:57 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:57 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:15:57 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:57 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:57 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:57 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:15:57 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:15:57 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:15:57 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:15:57 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:16:12 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:12 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:12 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9b) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:16:12 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:12 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:12 executing program 0: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:12 executing program 6: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:16:12 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:12 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:16:12 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:12 executing program 6: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:16:12 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:16:12 executing program 6: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:16:12 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:16:12 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:16:12 executing program 6: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:16:12 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:12 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:16:12 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:12 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:12 executing program 6: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:16:12 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:12 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 04:16:12 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:12 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:16:12 executing program 6: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:16:12 executing program 6: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:16:12 executing program 6: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:16:23 executing program 5: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:23 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:16:23 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:23 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:23 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:23 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) 04:16:23 executing program 6: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:23 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:23 executing program 5: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:23 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:23 executing program 6: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:23 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) 04:16:23 executing program 5: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:23 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:23 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:23 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:35 executing program 6: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:35 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:16:35 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:35 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:35 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:35 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) 04:16:35 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:35 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:35 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) 04:16:35 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:35 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:35 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) 04:16:35 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x0, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:35 executing program 5: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:35 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) 04:16:35 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:35 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x0, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:47 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:47 executing program 6: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:47 executing program 5: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:47 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:47 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) 04:16:47 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:47 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:47 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x0, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:47 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:47 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) 04:16:47 executing program 5: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:47 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:47 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) 04:16:47 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:16:47 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x0, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:16:47 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x0, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:05 executing program 2: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:17:05 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x0, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:05 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:05 executing program 5: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, 0x0) 04:17:05 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) 04:17:05 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:05 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:05 executing program 7: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:17:06 executing program 5: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, 0x0) 04:17:06 executing program 7: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:17:18 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:18 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:18 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:18 executing program 5: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, 0x0) 04:17:18 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) 04:17:18 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:18 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:18 executing program 7: syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:17:18 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, 0x0) 04:17:18 executing program 0: sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) 04:17:18 executing program 6: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, 0x0) 04:17:31 executing program 0: sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x8000) 04:17:31 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:31 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:17:31 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:31 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:31 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:17:31 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:31 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, 0x0) 04:17:31 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:31 executing program 0: sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) 04:17:31 executing program 7: syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, 0x0) 04:17:31 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:31 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:31 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:31 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:31 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:17:31 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:17:43 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:17:43 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:43 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:43 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:17:43 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x0, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:43 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:43 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:43 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:17:43 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:17:43 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:17:43 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:43 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:17:43 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:43 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:17:43 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:17:43 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:43 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:43 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:43 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:17:43 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:43 executing program 0: syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:17:56 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={0x0}}, 0x0) 04:17:56 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:56 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x0, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:56 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:56 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 04:17:56 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x0, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:56 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:56 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x0, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:56 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 04:17:57 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:57 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:17:57 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 04:17:57 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:57 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:57 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:17:57 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:17:57 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:17:57 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) 04:17:57 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:18:08 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:18:08 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:08 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x0, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) 04:18:08 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:08 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:18:08 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:08 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={0x0}}, 0x0) 04:18:08 executing program 7: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={0x0}}, 0x0) 04:18:08 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:18:08 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:18:20 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:20 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) 04:18:20 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:20 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x0, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:20 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:20 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:20 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:20 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:20 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) 04:18:20 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:18:20 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:20 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:32 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) 04:18:32 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:18:32 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) 04:18:32 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:32 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:32 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) 04:18:32 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) 04:18:32 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) 04:18:32 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:18:32 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:32 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) 04:18:32 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:32 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:32 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:32 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) 04:18:32 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) 04:18:32 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) 04:18:32 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:32 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:43 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:43 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:18:43 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:43 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) 04:18:43 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:43 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:43 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:43 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:43 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) 04:18:43 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:43 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) 04:18:43 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) 04:18:43 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:43 executing program 5: prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) 04:18:43 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 04:18:43 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', 0x0}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:43 executing program 5: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil) 04:18:55 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', 0x0}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:55 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:18:55 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:55 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 04:18:55 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140), &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:18:55 executing program 5: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil) 04:18:55 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 04:18:55 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:18:55 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:55 executing program 5: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil) 04:18:55 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:55 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x0, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:55 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:55 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:18:55 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 04:19:06 executing program 2: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, 0x0, 0x0) 04:19:06 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x0, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:06 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 04:19:06 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, 0x0, 0x0) 04:19:06 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:19:06 executing program 7: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, 0x0, 0x0) 04:19:06 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:06 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:19:07 executing program 5: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, 0x0, 0x0) 04:19:07 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:19:07 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:07 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:19:07 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:07 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:07 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 04:19:07 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, 0x0, 0x0) 04:19:18 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:18 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:18 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 04:19:18 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 04:19:18 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:19:18 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:19:18 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:18 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:18 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:18 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:19:18 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:19:18 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:18 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:19 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:19:19 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:19 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:19:32 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:32 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:32 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:19:32 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:32 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:32 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:32 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:32 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:33 executing program 2: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:19:33 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:19:33 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:33 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:19:33 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:19:33 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:19:33 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:33 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:33 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:33 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:33 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:19:33 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:19:47 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:19:47 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:19:47 executing program 7: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:19:47 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:47 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:19:47 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:47 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:47 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0x0, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:47 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:47 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:47 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:19:47 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:19:47 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:01 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:01 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:20:01 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:01 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:01 executing program 5: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:20:01 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:01 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:01 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:01 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:20:01 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:20:01 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:01 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:01 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:01 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:01 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x0, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:02 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:02 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:20:13 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:13 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x0, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:13 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:20:13 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:13 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x0, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:13 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:13 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:20:13 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:20:13 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:20:26 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:26 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:20:26 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:20:26 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:20:26 executing program 7: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:20:26 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:20:26 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x0, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:26 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:20:26 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:20:26 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:26 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:20:27 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:20:27 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:20:27 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:20:27 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:27 executing program 2: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:20:27 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:27 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:20:27 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:20:27 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:20:27 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:20:27 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:20:27 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:27 executing program 2: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:20:27 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:20:38 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:38 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:38 executing program 2: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:20:38 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) 04:20:38 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:38 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:20:38 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:20:38 executing program 7: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:38 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:20:38 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:38 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:20:38 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:20:50 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:20:50 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:20:50 executing program 2: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:20:50 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:20:50 executing program 7: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:20:50 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:51 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:20:51 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:51 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:20:51 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:20:51 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:20:51 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:51 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:51 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:20:51 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:20:51 executing program 2: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:20:51 executing program 7: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:20:51 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:20:51 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:20:51 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:20:51 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:02 executing program 5: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:21:02 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:02 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:21:02 executing program 2: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:21:02 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r2, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:21:02 executing program 0: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:02 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r2, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:21:02 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:21:03 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x1f) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:03 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:03 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:18 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:18 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:18 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r2, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:21:18 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:18 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:21:18 executing program 2: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) 04:21:18 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:21:18 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:21:18 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:18 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:18 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:21:18 executing program 5: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:21:18 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x0, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:18 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:18 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:21:31 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:21:31 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:21:31 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:31 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:31 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r2, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:21:31 executing program 2: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) 04:21:31 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:31 executing program 7: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) 04:21:31 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:31 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:31 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:21:31 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:21:31 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:31 executing program 3: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:31 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:31 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:31 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r1, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:43 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:43 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:43 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:21:43 executing program 2: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}}, 0x880) 04:21:43 executing program 5: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:21:43 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:43 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) 04:21:43 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:43 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:43 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:43 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:43 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:21:43 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:44 executing program 5: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:21:44 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:44 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:44 executing program 7: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}}, 0x880) 04:21:44 executing program 2: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) 04:21:44 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:44 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:44 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:21:44 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:44 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:21:44 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:44 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:21:57 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:57 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:57 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:21:57 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:57 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:57 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:21:57 executing program 2: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) 04:21:57 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:21:57 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:21:58 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:21:58 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:21:58 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:21:58 executing program 2: memfd_create(&(0x7f0000000000)='\x00', 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) 04:21:58 executing program 5: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) 04:21:58 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:22:09 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:22:09 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:22:09 executing program 2: memfd_create(&(0x7f0000000000)='\x00', 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 04:22:09 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:22:09 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:22:09 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:22:09 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:22:09 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:22:09 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:22:09 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:22:21 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:22:21 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:22:21 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:22:21 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:22:21 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:22:21 executing program 2: memfd_create(&(0x7f0000000000)='\x00', 0x0) 04:22:21 executing program 5: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:22:21 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:22:21 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) 04:22:21 executing program 2: memfd_create(0x0, 0x0) 04:22:36 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:22:36 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x1f) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:22:36 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:22:36 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:22:36 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) 04:22:36 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:22:36 executing program 2: memfd_create(0x0, 0x0) 04:22:36 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:22:36 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:22:36 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) 04:22:36 executing program 2: memfd_create(0x0, 0x0) 04:22:36 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:22:36 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x1f) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:22:36 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:22:36 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:22:36 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:22:36 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:22:36 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x1f) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:22:36 executing program 5: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:22:48 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:22:48 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:22:48 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:22:48 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:22:48 executing program 7: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:22:48 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:22:48 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:22:48 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) socket$unix(0x1, 0x1, 0x0) 04:22:48 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:22:48 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:22:48 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) socket$unix(0x1, 0x1, 0x0) 04:22:48 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:22:48 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:22:48 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:22:48 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:22:48 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:22:48 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:22:48 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:22:48 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:23:00 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:23:00 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:23:00 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:00 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:23:00 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:00 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:00 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:23:00 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:23:00 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:23:00 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:11 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:23:11 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:23:11 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:23:11 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:11 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:23:11 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:23:11 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:23:11 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:23:11 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:23:11 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:23:11 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:11 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:23:11 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:23:11 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:11 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:23:11 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:23:11 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:11 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:23:11 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:23:11 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:23:11 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:23:11 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:23:11 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:23:22 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:23:22 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:23:22 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:22 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:23:22 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:23:22 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:23:22 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:23 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:23:23 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:23:23 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:23:23 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:23 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:23 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:35 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:23:35 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:35 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:35 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:23:35 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:23:35 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:35 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:23:35 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:35 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) 04:23:35 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:23:35 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:35 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) 04:23:35 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:35 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:48 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:48 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:48 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:48 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:48 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) 04:23:48 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:48 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:23:48 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:48 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:48 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:23:49 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:23:49 executing program 7: munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) 04:23:49 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:01 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:01 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:24:01 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:01 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:24:01 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:24:01 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:01 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:02 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:02 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) socket$inet6_udplite(0xa, 0x2, 0x88) 04:24:02 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:02 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:24:02 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:02 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:24:02 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:24:02 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:24:02 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:02 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:14 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:24:14 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:14 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:14 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:14 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:14 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:24:14 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:14 executing program 1: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 04:24:14 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:24:14 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:14 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:14 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:14 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:15 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:15 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:24:29 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:24:29 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:29 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) socket$inet6_udplite(0xa, 0x2, 0x88) 04:24:29 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:24:29 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) socket$unix(0x1, 0x1, 0x0) 04:24:29 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:29 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:29 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:24:29 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 04:24:29 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:24:29 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) 04:24:29 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:29 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) socket$unix(0x1, 0x1, 0x0) 04:24:29 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:29 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:30 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) 04:24:30 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) 04:24:30 executing program 5: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:45 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) 04:24:45 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:24:45 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:45 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:24:45 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x880) 04:24:45 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:45 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:45 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:45 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) 04:24:45 executing program 6: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:45 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:45 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:45 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:45 executing program 6: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:45 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:45 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:45 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) 04:24:45 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:24:56 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:56 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:56 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:56 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) 04:24:56 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:24:56 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:56 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:56 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:24:56 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 04:24:56 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) 04:24:56 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:08 executing program 1: memfd_create(&(0x7f0000000000)='\x00', 0x0) 04:25:08 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) 04:25:08 executing program 6: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:08 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) 04:25:08 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:08 executing program 1: memfd_create(0x0, 0x0) 04:25:08 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x0, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:25:08 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:25:08 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:25:08 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:08 executing program 1: memfd_create(0x0, 0x0) 04:25:08 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:08 executing program 1: memfd_create(0x0, 0x0) 04:25:08 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:08 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) 04:25:08 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) 04:25:08 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:19 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:19 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:25:19 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:25:19 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 04:25:20 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:20 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:20 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:20 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x0, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:25:20 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:25:20 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:20 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 04:25:20 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:20 executing program 6: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:20 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:25:20 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:20 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:25:20 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x70bd25, 0x0, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:25:33 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:25:33 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:33 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:25:33 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:25:33 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:33 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:33 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:33 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:25:33 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:33 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:25:33 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:33 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 04:25:33 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) 04:25:33 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:25:33 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:25:47 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) 04:25:47 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:25:47 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:25:47 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:25:47 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:25:47 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)) 04:25:47 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:25:47 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:25:47 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x100, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:25:47 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:25:47 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) 04:25:47 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r2, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:25:47 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:25:47 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:25:47 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) 04:25:47 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r2, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:26:00 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) 04:26:00 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) 04:26:00 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) 04:26:00 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:26:00 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r2, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:26:00 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r2, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:26:00 executing program 3: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0x0, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:26:00 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:26:00 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:26:00 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) 04:26:00 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:26:00 executing program 4: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:26:00 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) 04:26:00 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r4, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000500)={'wg2\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:26:01 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) 04:26:01 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:26:01 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x6edb, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x43dc, 0x0, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:26:13 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x880) 04:26:13 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x880) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) 04:26:13 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x880) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 04:26:14 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r2, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:26:14 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) 04:26:14 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x880) 04:26:14 executing program 6: mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x9}, 0x1f) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xdbc7, 0x20, 0x3, 0xeb}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x43dc, &(0x7f0000000140)={0x0, 0x3245, 0xa, 0x0, 0x211, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000001c0), 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x9b) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x7e, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x40, 0x30, 0xa12, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r2, 0x4, 0x81, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x44c66510d58d76d6, 0x7, 0x6, 0x3}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000001000/0x4000)=nil) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$sr(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) 04:26:14 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) 04:26:14 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x880) 04:26:14 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) 04:26:14 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) 04:26:14 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x880) 04:26:14 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) 04:26:14 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 04:26:14 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) 04:26:14 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) 04:26:26 executing program 3: memfd_create(&(0x7f0000000000)='\x00', 0x0) 04:26:26 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) 04:26:26 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) 04:26:26 executing program 3: memfd_create(0x0, 0x0) 04:26:26 executing program 3: memfd_create(0x0, 0x0) 04:26:26 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 04:26:26 executing program 3: memfd_create(0x0, 0x0) 04:26:26 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) 04:26:26 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) 04:26:26 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 04:26:26 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) 04:26:26 executing program 4: memfd_create(&(0x7f0000000000)='\x00', 0x0) 04:26:26 executing program 4: memfd_create(0x0, 0x0) 04:26:26 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xf7, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x8020, 0x1, 0x10000}}) 04:26:26 executing program 4: memfd_create(0x0, 0x0) 04:26:26 executing program 4: memfd_create(0x0, 0x0) 04:26:38 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20400c0) 04:26:38 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) 04:26:38 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 04:26:38 executing program 6: memfd_create(&(0x7f0000000000)='\x00', 0x0) 04:26:38 executing program 6: memfd_create(0x0, 0x0) 04:26:38 executing program 6: memfd_create(0x0, 0x0) 04:26:39 executing program 6: memfd_create(0x0, 0x0) 2025/04/29 04:29:39 Manager.NewInput call failed: read tcp 127.0.0.1:57166->127.0.0.1:38089: i/o timeout VM DIAGNOSIS: 04:31:39 Registers: info registers vcpu 0 RAX=ffffffff83e8ee20 RBX=0000000000000000 RCX=ffffffff83e769bc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e8f428 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85678ec8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e8ee2e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffcea743f78 CR3=000000000d698000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffff000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=40404040404040404040404040404040 XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000 XMM08=25203a646672656d6974206574616572 XMM09=00000000000000000000000000000000 XMM10=20000000200000002000000020000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e8ee20 RBX=0000000000000001 RCX=ffffffff83e769bc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e8f428 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85678ec8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e8ee2e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055776e707684 CR3=000000000ef3e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65 XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=00000000000000510065636976726573 XMM04=2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e XMM05=000055776e7a59c0000055776e74ec30 XMM06=000000000000006563697665642e3469 XMM07=00000000000000000000000000000000 XMM08=732f6563696c732e6d65747379732f3a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000