f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:02 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) 20:33:02 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97", 0x3, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:02 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x0, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) 20:33:02 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540), 0x0, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:02 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:02 executing program 3: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair(0x0, 0x800, 0x5, &(0x7f0000001480)) 20:33:02 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97", 0x3, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:02 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) 20:33:02 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 20:33:03 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540), 0x0, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 3: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) socketpair(0x0, 0x800, 0x5, &(0x7f0000001480)) 20:33:03 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97", 0x3, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:03 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 20:33:03 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97", 0x3, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 3: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair(0x0, 0x800, 0x5, &(0x7f0000001480)) 20:33:03 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a7", 0x5, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 3: socketpair(0x0, 0x800, 0x5, &(0x7f0000001480)) 20:33:03 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:03 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 20:33:03 executing program 3: socketpair(0x0, 0x800, 0x5, &(0x7f0000001480)) 20:33:03 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97", 0x3, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a7", 0x5, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 3: socketpair(0x0, 0x0, 0x5, &(0x7f0000001480)) 20:33:03 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:03 executing program 3: socketpair(0x0, 0x0, 0x5, &(0x7f0000001480)) 20:33:03 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97", 0x3, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a7", 0x5, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 3: socketpair(0x0, 0x0, 0x5, &(0x7f0000001480)) 20:33:03 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:03 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) socketpair(0x0, 0x800, 0x5, &(0x7f0000001480)) 20:33:03 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000001480)) 20:33:03 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a7", 0x5, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x0, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) 20:33:03 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) 20:33:03 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 3: socketpair(0x0, 0x0, 0x0, 0x0) 20:33:03 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:03 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a7", 0x5, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x0, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) socketpair(0x0, 0x800, 0x5, &(0x7f0000001480)) 20:33:03 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a7", 0x5, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x0, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:03 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a7", 0x5, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) socketpair(0x0, 0x800, 0x5, &(0x7f0000001480)) 20:33:03 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a7", 0x5, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 2: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:03 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a7", 0x5, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x0, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 2: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:03 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a7", 0x5, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) 20:33:03 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x0, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:03 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a7", 0x5, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x0, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 2: openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:03 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a7", 0x5, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) 20:33:03 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 2: openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:03 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 2: openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:03 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r2 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r3, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r4, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) sendto$llc(r3, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) 20:33:03 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) 20:33:03 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a7", 0x5, 0x8084, 0x0, 0x0) 20:33:03 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x7fff, 0x2000) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x0, 0x2000) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r3, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r4, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) sendto$llc(r3, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x0, 0x2000) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) 20:33:03 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:03 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x0, 0x2000) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 20:33:03 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:03 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) 20:33:04 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x0, 0x2000) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 20:33:04 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(0x0, 0x0, 0x2000) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 20:33:04 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 20:33:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) 20:33:04 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) 20:33:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) 20:33:04 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) 20:33:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:04 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) 20:33:04 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) 20:33:04 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) 20:33:04 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) 20:33:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) 20:33:04 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, 0x0, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:04 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 20:33:04 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) 20:33:04 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) 20:33:04 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, 0x0, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) connect$llc(0xffffffffffffffff, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:04 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) 20:33:04 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) 20:33:04 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:04 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, 0x0, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) connect$llc(0xffffffffffffffff, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:04 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) 20:33:04 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:04 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) 20:33:04 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:04 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) 20:33:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) connect$llc(0xffffffffffffffff, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:04 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) 20:33:04 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) 20:33:04 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r2 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r3, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) 20:33:04 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, 0x0, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) 20:33:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r3, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:04 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:04 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, 0x0, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, 0x0, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r2 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r3, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) 20:33:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) 20:33:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r3, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:04 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:04 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r2 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r3, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) 20:33:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580), 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 20:33:04 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r3, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:04 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:04 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r2 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r3, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) 20:33:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580), 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) 20:33:04 executing program 3: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r0, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:04 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:04 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580), 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580), 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 20:33:04 executing program 3: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r0, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:04 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580), 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:04 executing program 3: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r0, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:04 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r0, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:04 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:04 executing program 3: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x280200, 0x0) connect$llc(r0, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) 20:33:04 executing program 3: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x280200, 0x0) connect$llc(r0, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:04 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:04 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580), 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) 20:33:04 executing program 4: syz_open_dev$usbfs(0x0, 0x0, 0x2000) 20:33:04 executing program 3: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x280200, 0x0) connect$llc(r0, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:04 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:04 executing program 4: syz_open_dev$usbfs(0x0, 0x0, 0x2000) 20:33:04 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:04 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) connect$llc(r0, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:04 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 0: accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:04 executing program 0: accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000001500), 0x0) 20:33:04 executing program 4: syz_open_dev$usbfs(0x0, 0x0, 0x2000) 20:33:04 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580), 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) connect$llc(r0, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:04 executing program 0: accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:33:04 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) 20:33:04 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) connect$llc(r0, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:04 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:04 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:05 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:05 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:05 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) 20:33:05 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r0, 0x0, 0x0) 20:33:05 executing program 4: syz_io_uring_setup(0x4b2e, &(0x7f0000001a00), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000001ac0)) 20:33:05 executing program 4: syz_io_uring_setup(0x4b2e, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 3: syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:05 executing program 4: socketpair(0x0, 0x800, 0x5, &(0x7f0000001480)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:05 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) connect$llc(0xffffffffffffffff, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) 20:33:05 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:05 executing program 4: socketpair(0x0, 0x800, 0x5, &(0x7f0000001480)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:05 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) 20:33:05 executing program 4: socketpair(0x0, 0x800, 0x5, &(0x7f0000001480)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:05 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) 20:33:05 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:05 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:05 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:05 executing program 4: socketpair(0x0, 0x0, 0x5, &(0x7f0000001480)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000001480)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) syz_io_uring_submit(r3, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:05 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) 20:33:05 executing program 4: socketpair(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:05 executing program 4: socketpair(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:05 executing program 4: socketpair(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:05 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000001480)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x5) 20:33:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) syz_io_uring_submit(r3, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:05 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) 20:33:05 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000001480)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 20:33:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) syz_io_uring_submit(r3, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:05 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) 20:33:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) syz_io_uring_submit(r4, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:05 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) syz_io_uring_submit(r4, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:05 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x0, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) 20:33:05 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) syz_io_uring_submit(r4, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:05 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x0, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) 20:33:05 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) 20:33:05 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) 20:33:05 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) 20:33:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x0, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x0, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) 20:33:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x0, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) 20:33:05 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:05 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) syz_io_uring_submit(r4, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:05 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) 20:33:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x0, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x0, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) 20:33:05 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) 20:33:05 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) 20:33:05 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x0, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x0, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) 20:33:05 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) 20:33:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) 20:33:05 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) 20:33:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x0, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:05 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) 20:33:06 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) 20:33:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x0, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x0, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) 20:33:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) 20:33:06 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x0, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) 20:33:06 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) 20:33:06 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) 20:33:06 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:06 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 20:33:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:06 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) 20:33:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) 20:33:06 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 20:33:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) 20:33:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) 20:33:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) 20:33:06 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) 20:33:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) 20:33:06 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) 20:33:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:06 executing program 0: syz_open_dev$usbfs(0x0, 0x7fff, 0x2000) 20:33:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 20:33:06 executing program 0: syz_open_dev$usbfs(0x0, 0x7fff, 0x2000) 20:33:06 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 0: syz_open_dev$usbfs(0x0, 0x7fff, 0x2000) 20:33:06 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) 20:33:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) 20:33:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) 20:33:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:06 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) 20:33:06 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) 20:33:06 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 0: syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x0) 20:33:06 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) 20:33:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:06 executing program 3: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 20:33:06 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:06 executing program 3: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) 20:33:06 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:06 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) 20:33:06 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) 20:33:06 executing program 3: syz_open_dev$usbfs(0x0, 0x7fff, 0x2000) 20:33:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 3: syz_open_dev$usbfs(0x0, 0x7fff, 0x2000) 20:33:06 executing program 3: syz_open_dev$usbfs(0x0, 0x7fff, 0x2000) 20:33:06 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) 20:33:06 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) 20:33:06 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:06 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:06 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) 20:33:06 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) 20:33:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:06 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x0) 20:33:06 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) 20:33:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) syz_io_uring_submit(r4, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:06 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:06 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) 20:33:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:06 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:06 executing program 0: sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140d, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x240088c0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x1412, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x800) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x430080, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x6c, 0x1407, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x6c}}, 0x11) 20:33:06 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r4}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r4}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:07 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) 20:33:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r4}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:07 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:07 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r4}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:07 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 20:33:07 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) 20:33:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:07 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) 20:33:07 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 20:33:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:07 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) 20:33:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) 20:33:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:07 executing program 4: syz_open_dev$usbfs(0x0, 0x7fff, 0x2000) 20:33:07 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:07 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) 20:33:07 executing program 4: syz_open_dev$usbfs(0x0, 0x7fff, 0x2000) 20:33:07 executing program 4: syz_open_dev$usbfs(0x0, 0x7fff, 0x2000) 20:33:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) 20:33:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, 0x0, 0x4) 20:33:07 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) 20:33:07 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) 20:33:07 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) 20:33:07 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x2000) 20:33:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) 20:33:07 executing program 4: syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x0) 20:33:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, 0x0, 0x4) 20:33:07 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) 20:33:07 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) 20:33:07 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) 20:33:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) 20:33:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, 0x0, 0x4) 20:33:07 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) 20:33:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 4: sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140d, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x240088c0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x1412, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x800) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x430080, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x140e, 0x200, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4040894) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x1411, 0x2, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x4008) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x18, 0x140c, 0x8, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x94, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x10) openat$cgroup_devices(r0, &(0x7f0000000840)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000880)='memory.pressure\x00', 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f00000008c0)='syz0\x00', 0x1ff) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000900), 0x800, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000940)={0x29, 0x2}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, 0x140c, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x20000086) socket$nl_rdma(0x10, 0x3, 0x14) 20:33:07 executing program 4: sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140d, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x240088c0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x1412, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x800) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x430080, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x140e, 0x200, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4040894) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x18, 0x1411, 0x2, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x4008) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x18, 0x140c, 0x8, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x94, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:crack_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x10) openat$cgroup_devices(r0, &(0x7f0000000840)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000880)='memory.pressure\x00', 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f00000008c0)='syz0\x00', 0x1ff) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000900), 0x800, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000940)={0x29, 0x2}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, 0x140c, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x20000086) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x1409, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008c1}, 0x880) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000c00)='ns/net\x00') 20:33:07 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:07 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:07 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:07 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:07 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:07 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:07 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680), 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:07 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:07 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) 20:33:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680), 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) 20:33:07 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:07 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) 20:33:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:08 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680), 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) 20:33:08 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:08 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r4}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r4}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x0, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r4}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) 20:33:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r4}) 20:33:08 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r4}) 20:33:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r4}) 20:33:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x0, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r4}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)) 20:33:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) 20:33:08 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) 20:33:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) 20:33:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x0, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r4}) 20:33:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) 20:33:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) 20:33:08 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) 20:33:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) 20:33:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) 20:33:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) 20:33:08 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) 20:33:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) 20:33:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) 20:33:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, 0xffffffffffffffff, 0x10000000) 20:33:08 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) 20:33:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) 20:33:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) 20:33:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) 20:33:08 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, 0xffffffffffffffff, 0x10000000) 20:33:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) 20:33:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x0, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, 0xffffffffffffffff, 0x10000000) 20:33:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) 20:33:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r4, 0x5523) 20:33:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x0, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r8, 0x10000000) 20:33:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) 20:33:08 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) 20:33:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x0, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r7, 0x10000000) 20:33:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) 20:33:08 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) 20:33:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r6, 0x10000000) 20:33:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:08 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) 20:33:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x0, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) 20:33:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r6, 0x10000000) 20:33:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) 20:33:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) 20:33:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) 20:33:08 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) 20:33:08 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x0, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:08 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r6, 0x10000000) 20:33:08 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) 20:33:09 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) 20:33:09 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) 20:33:09 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r6, 0x10000000) 20:33:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) 20:33:09 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) 20:33:09 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) 20:33:09 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r6, 0x10000000) 20:33:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) 20:33:09 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:09 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) 20:33:09 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r6, 0x10000000) 20:33:09 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) 20:33:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:09 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) 20:33:09 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r6, 0x10000000) 20:33:09 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) 20:33:09 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) sendto$llc(0xffffffffffffffff, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) 20:33:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:09 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r5, 0x10000000) 20:33:09 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) sendto$llc(0xffffffffffffffff, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) [ 119.793366][T27388] ================================================================== [ 119.801495][T27388] BUG: KCSAN: data-race in nfc_llcp_local_put / nfc_llcp_register_device [ 119.809935][T27388] [ 119.812262][T27388] write to 0xffff88811d4ffc08 of 8 bytes by task 27403 on cpu 1: [ 119.820004][T27388] nfc_llcp_register_device+0x3e0/0x440 [ 119.825577][T27388] nfc_register_device+0x63/0x190 [ 119.830616][T27388] nci_register_device+0x4ee/0x580 [ 119.835758][T27388] virtual_ncidev_open+0xd8/0x140 20:33:09 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) sendto$llc(0xffffffffffffffff, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) [ 119.840824][T27388] misc_open+0x264/0x2a0 [ 119.845086][T27388] chrdev_open+0x362/0x3d0 [ 119.849517][T27388] do_dentry_open+0x59a/0x910 [ 119.854214][T27388] vfs_open+0x43/0x50 [ 119.858210][T27388] path_openat+0x16b8/0x1b60 [ 119.862811][T27388] do_filp_open+0x105/0x220 [ 119.867326][T27388] do_sys_openat2+0xb5/0x2a0 [ 119.872020][T27388] __x64_sys_openat+0xef/0x110 [ 119.876802][T27388] do_syscall_64+0x2b/0x70 [ 119.881228][T27388] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.887138][T27388] 20:33:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x0, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) sendto$llc(0xffffffffffffffff, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) 20:33:09 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) [ 119.889461][T27388] read to 0xffff88811d4ffc08 of 8 bytes by task 27388 on cpu 0: [ 119.897095][T27388] nfc_llcp_local_put+0x55/0x1a0 [ 119.902049][T27388] nfc_llcp_unregister_device+0x100/0x120 [ 119.907795][T27388] nfc_unregister_device+0xe2/0x130 [ 119.913000][T27388] nci_unregister_device+0x160/0x170 [ 119.918305][T27388] virtual_ncidev_close+0x2c/0x50 [ 119.923344][T27388] __fput+0x245/0x570 [ 119.927335][T27388] ____fput+0x11/0x20 [ 119.931325][T27388] task_work_run+0xde/0x110 [ 119.935834][T27388] exit_to_user_mode_loop+0x124/0x130 [ 119.941216][T27388] syscall_exit_to_user_mode+0x6a/0x90 [ 119.946687][T27388] do_syscall_64+0x37/0x70 [ 119.951109][T27388] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.957021][T27388] [ 119.959350][T27388] value changed: 0xffffffff85e80690 -> 0xffff888108f38400 [ 119.966459][T27388] [ 119.968785][T27388] Reported by Kernel Concurrency Sanitizer on: [ 119.974931][T27388] CPU: 0 PID: 27388 Comm: syz-executor.1 Not tainted 6.2.0-rc2-syzkaller-00010-g69b41ac87e4a-dirty #0 20:33:09 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x0, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) sendto$llc(0xffffffffffffffff, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) 20:33:09 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:09 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r5, 0x10000000) 20:33:09 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)) 20:33:09 executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendto$llc(0xffffffffffffffff, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) 20:33:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x0, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 0: sendto$llc(0xffffffffffffffff, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) [ 119.985874][T27388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 119.995922][T27388] ================================================================== 20:33:09 executing program 0: sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x8084, 0x0, 0x0) 20:33:09 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:09 executing program 0: sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 20:33:09 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:09 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x0, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r4, 0x10000000) 20:33:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x0, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:09 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) connect$llc(0xffffffffffffffff, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:09 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r4, 0x10000000) 20:33:09 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x0, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) connect$llc(0xffffffffffffffff, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:09 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r3, 0x10000000) 20:33:09 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) connect$llc(0xffffffffffffffff, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:09 executing program 2: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x0, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r6, 0x10000000) 20:33:09 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r3, 0x10000000) 20:33:09 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) connect$llc(0xffffffffffffffff, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:09 executing program 2: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:09 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 2: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 2: accept4$llc(0xffffffffffffffff, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) 20:33:09 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) 20:33:09 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r3, 0x10000000) 20:33:09 executing program 2: accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000001500), 0x0) 20:33:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 2: accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:33:09 executing program 3: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:09 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) 20:33:09 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) 20:33:09 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:09 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r0, 0x10000000) 20:33:10 executing program 3: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) connect$llc(0xffffffffffffffff, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:10 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:10 executing program 3: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$llc(0xffffffffffffffff, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:10 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:10 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:10 executing program 3: connect$llc(0xffffffffffffffff, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) 20:33:10 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:10 executing program 3: connect$llc(0xffffffffffffffff, 0x0, 0x0) 20:33:10 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r0, 0x10000000) 20:33:10 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:10 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:10 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r5, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r7, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) sendto$llc(r5, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r5, 0x5523) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40015}, 0x10048040) ioctl$USBDEVFS_RESET(r1, 0x5514) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r9, 0x10000000) io_uring_setup(0x64d9, &(0x7f0000001980)={0x0, 0x18b4, 0x40, 0x0, 0x11, 0x0, r5}) syz_io_uring_setup(0x4b2e, &(0x7f0000001a00)={0x0, 0x2d3, 0x400, 0x0, 0x3e2, 0x0, r5}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0) syz_io_uring_submit(r4, r10, &(0x7f0000001b00)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x7, 0x0, 0x9, 0x0, 0x1}, 0x5) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001b40)=0x401) pipe2$watch_queue(&(0x7f0000001b80), 0x80) 20:33:10 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r0, 0x10000000) 20:33:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0xf5e, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}, 0x6) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000080)=0x28c, 0x4) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0x1f, &(0x7f0000000200)=[r2, r0], 0x2}, 0x2) socketpair(0x5, 0x2, 0x18a1, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xb1}, 0x20000059) ioctl$USBDEVFS_WAIT_FOR_RESUME(r2, 0x5523) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f00000003c0)={0xf}) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000400)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x48094) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000540)={0x79f2, 0x1, [{0x6}]}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000005c0), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004010) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000740), 0x62acdcf1ee2bdbc0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000007c0)={0x3, 0x0, &(0x7f0000000780)=[r6, r3, r8, r6]}, 0x4) r9 = openat$cgroup_ro(r2, &(0x7f0000000840)='cgroup.freeze\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r9) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000980)={0x1, 0x1, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)=""/104, 0x68}], &(0x7f0000000940)=[0x3f, 0x5, 0x4, 0xf20d, 0x7b, 0x7fffffff, 0x5c]}, 0x20) pipe2$watch_queue(&(0x7f00000009c0), 0x80) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x18, 0x140f, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000090}, 0x4) recvmsg$can_bcm(r2, &(0x7f0000002140)={&(0x7f0000000b00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000b80)=""/22, 0x16}, {&(0x7f0000000bc0)=""/192, 0xc0}, {&(0x7f0000000c80)=""/162, 0xa2}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/77, 0x4d}, {&(0x7f0000001dc0)=""/69, 0x45}, {&(0x7f0000001e40)=""/42, 0x2a}, {&(0x7f0000001e80)=""/32, 0x20}, {&(0x7f0000001ec0)=""/128, 0x80}, {&(0x7f0000001f40)=""/93, 0x5d}], 0xa, &(0x7f0000002080)=""/137, 0x89}, 0x10000) bind$llc(r4, &(0x7f0000002180)={0x1a, 0x20, 0x5, 0x0, 0x4, 0x0, @broadcast}, 0x10) openat$cgroup_devices(r0, &(0x7f00000021c0)='devices.allow\x00', 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000002200), 0xffffffffffffffff) 20:33:10 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001840), 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r0, 0x10000000) 20:33:10 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:10 executing program 4: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r0, 0x10000000) 20:33:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0xf5e, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}, 0x6) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000080)=0x28c, 0x4) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0x1f, &(0x7f0000000200)=[r2, r0], 0x2}, 0x2) socketpair(0x5, 0x2, 0x18a1, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xb1}, 0x20000059) ioctl$USBDEVFS_WAIT_FOR_RESUME(r2, 0x5523) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f00000003c0)={0xf}) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000400)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x48094) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000540)={0x79f2, 0x1, [{0x6}]}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000005c0), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004010) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000740), 0x62acdcf1ee2bdbc0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000007c0)={0x3, 0x0, &(0x7f0000000780)=[r6, r3, r8, r6]}, 0x4) r9 = openat$cgroup_ro(r2, &(0x7f0000000840)='cgroup.freeze\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r9) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000980)={0x1, 0x1, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)=""/104, 0x68}], &(0x7f0000000940)=[0x3f, 0x5, 0x4, 0xf20d, 0x7b, 0x7fffffff, 0x5c]}, 0x20) pipe2$watch_queue(&(0x7f00000009c0), 0x80) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x18, 0x140f, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000090}, 0x4) recvmsg$can_bcm(r2, &(0x7f0000002140)={&(0x7f0000000b00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000b80)=""/22, 0x16}, {&(0x7f0000000bc0)=""/192, 0xc0}, {&(0x7f0000000c80)=""/162, 0xa2}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/77, 0x4d}, {&(0x7f0000001dc0)=""/69, 0x45}, {&(0x7f0000001e40)=""/42, 0x2a}, {&(0x7f0000001e80)=""/32, 0x20}, {&(0x7f0000001ec0)=""/128, 0x80}, {&(0x7f0000001f40)=""/93, 0x5d}], 0xa, &(0x7f0000002080)=""/137, 0x89}, 0x10000) bind$llc(r4, &(0x7f0000002180)={0x1a, 0x20, 0x5, 0x0, 0x4, 0x0, @broadcast}, 0x10) openat$cgroup_devices(r0, &(0x7f00000021c0)='devices.allow\x00', 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000002200), 0xffffffffffffffff) 20:33:10 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r5, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:10 executing program 4: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r0, 0x10000000) 20:33:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0xf5e, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}, 0x6) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000080)=0x28c, 0x4) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0x1f, &(0x7f0000000200)=[r2, r0], 0x2}, 0x2) socketpair(0x5, 0x2, 0x18a1, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xb1}, 0x20000059) ioctl$USBDEVFS_WAIT_FOR_RESUME(r2, 0x5523) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f00000003c0)={0xf}) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000400)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x48094) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000540)={0x79f2, 0x1, [{0x6}]}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000005c0), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004010) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000740), 0x62acdcf1ee2bdbc0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000007c0)={0x3, 0x0, &(0x7f0000000780)=[r6, r3, r8, r6]}, 0x4) r9 = openat$cgroup_ro(r2, &(0x7f0000000840)='cgroup.freeze\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r9) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000980)={0x1, 0x1, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)=""/104, 0x68}], &(0x7f0000000940)=[0x3f, 0x5, 0x4, 0xf20d, 0x7b, 0x7fffffff, 0x5c]}, 0x20) pipe2$watch_queue(&(0x7f00000009c0), 0x80) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x18, 0x140f, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000090}, 0x4) recvmsg$can_bcm(r2, &(0x7f0000002140)={&(0x7f0000000b00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000b80)=""/22, 0x16}, {&(0x7f0000000bc0)=""/192, 0xc0}, {&(0x7f0000000c80)=""/162, 0xa2}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/77, 0x4d}, {&(0x7f0000001dc0)=""/69, 0x45}, {&(0x7f0000001e40)=""/42, 0x2a}, {&(0x7f0000001e80)=""/32, 0x20}, {&(0x7f0000001ec0)=""/128, 0x80}, {&(0x7f0000001f40)=""/93, 0x5d}], 0xa, &(0x7f0000002080)=""/137, 0x89}, 0x10000) bind$llc(r4, &(0x7f0000002180)={0x1a, 0x20, 0x5, 0x0, 0x4, 0x0, @broadcast}, 0x10) openat$cgroup_devices(r0, &(0x7f00000021c0)='devices.allow\x00', 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000002200), 0xffffffffffffffff) 20:33:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0xf5e, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}, 0x6) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000080)=0x28c, 0x4) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0x1f, &(0x7f0000000200)=[r2, r0], 0x2}, 0x2) socketpair(0x5, 0x2, 0x18a1, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xb1}, 0x20000059) ioctl$USBDEVFS_WAIT_FOR_RESUME(r2, 0x5523) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f00000003c0)={0xf}) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000400)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x48094) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000540)={0x79f2, 0x1, [{0x6}]}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000005c0), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004010) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000740), 0x62acdcf1ee2bdbc0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000007c0)={0x3, 0x0, &(0x7f0000000780)=[r6, r3, r8, r6]}, 0x4) r9 = openat$cgroup_ro(r2, &(0x7f0000000840)='cgroup.freeze\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r9) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000980)={0x1, 0x1, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)=""/104, 0x68}], &(0x7f0000000940)=[0x3f, 0x5, 0x4, 0xf20d, 0x7b, 0x7fffffff, 0x5c]}, 0x20) pipe2$watch_queue(&(0x7f00000009c0), 0x80) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x18, 0x140f, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000090}, 0x4) recvmsg$can_bcm(r2, &(0x7f0000002140)={&(0x7f0000000b00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000b80)=""/22, 0x16}, {&(0x7f0000000bc0)=""/192, 0xc0}, {&(0x7f0000000c80)=""/162, 0xa2}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/77, 0x4d}, {&(0x7f0000001dc0)=""/69, 0x45}, {&(0x7f0000001e40)=""/42, 0x2a}, {&(0x7f0000001e80)=""/32, 0x20}, {&(0x7f0000001ec0)=""/128, 0x80}, {&(0x7f0000001f40)=""/93, 0x5d}], 0xa, &(0x7f0000002080)=""/137, 0x89}, 0x10000) bind$llc(r4, &(0x7f0000002180)={0x1a, 0x20, 0x5, 0x0, 0x4, 0x0, @broadcast}, 0x10) openat$cgroup_devices(r0, &(0x7f00000021c0)='devices.allow\x00', 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000002200), 0xffffffffffffffff) 20:33:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0xf5e, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}, 0x6) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000080)=0x28c, 0x4) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0x1f, &(0x7f0000000200)=[r2, r0], 0x2}, 0x2) socketpair(0x5, 0x2, 0x18a1, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xb1}, 0x20000059) ioctl$USBDEVFS_WAIT_FOR_RESUME(r2, 0x5523) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f00000003c0)={0xf}) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000400)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x48094) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000540)={0x79f2, 0x1, [{0x6}]}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000005c0), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004010) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000740), 0x62acdcf1ee2bdbc0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000007c0)={0x3, 0x0, &(0x7f0000000780)=[r6, r3, r8, r6]}, 0x4) r9 = openat$cgroup_ro(r2, &(0x7f0000000840)='cgroup.freeze\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r9) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000980)={0x1, 0x1, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)=""/104, 0x68}], &(0x7f0000000940)=[0x3f, 0x5, 0x4, 0xf20d, 0x7b, 0x7fffffff, 0x5c]}, 0x20) pipe2$watch_queue(&(0x7f00000009c0), 0x80) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x18, 0x140f, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000090}, 0x4) recvmsg$can_bcm(r2, &(0x7f0000002140)={&(0x7f0000000b00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000b80)=""/22, 0x16}, {&(0x7f0000000bc0)=""/192, 0xc0}, {&(0x7f0000000c80)=""/162, 0xa2}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/77, 0x4d}, {&(0x7f0000001dc0)=""/69, 0x45}, {&(0x7f0000001e40)=""/42, 0x2a}, {&(0x7f0000001e80)=""/32, 0x20}, {&(0x7f0000001ec0)=""/128, 0x80}, {&(0x7f0000001f40)=""/93, 0x5d}], 0xa, &(0x7f0000002080)=""/137, 0x89}, 0x10000) bind$llc(r4, &(0x7f0000002180)={0x1a, 0x20, 0x5, 0x0, 0x4, 0x0, @broadcast}, 0x10) openat$cgroup_devices(r0, &(0x7f00000021c0)='devices.allow\x00', 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000002200), 0xffffffffffffffff) 20:33:10 executing program 4: r0 = openat$full(0xffffffffffffff9c, 0x0, 0x64c680, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r0, 0x10000000) 20:33:10 executing program 5: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x7fff, 0x2000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0xfffffffc, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x8) r3 = syz_io_uring_setup(0x35af, &(0x7f0000000100)={0x0, 0x552, 0x4, 0x0, 0x11f}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r1, 0x2) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000013c0)=[{0x3, 0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/134, 0x86}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/91, 0x5b}], &(0x7f0000001380)=[0x8000000000000000]}], 0x1) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001400), 0x280200, 0x0) connect$llc(r4, &(0x7f0000001440)={0x1a, 0x336, 0x6, 0x77, 0x3, 0x8, @remote}, 0x10) socketpair(0x10, 0x800, 0x5, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$llc(r6, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001500)=0x10, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) sendto$llc(r4, &(0x7f0000001540)="8c0f97d2a702", 0x6, 0x8084, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5f1449ea3bfddead}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10024001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x40, 0x7, 0x7}}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) 20:33:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0xf5e, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1]}, 0x6) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000080)=0x28c, 0x4) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0x1f, &(0x7f0000000200)=[r2, r0], 0x2}, 0x2) socketpair(0x5, 0x2, 0x18a1, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xb1}, 0x20000059) ioctl$USBDEVFS_WAIT_FOR_RESUME(r2, 0x5523) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f00000003c0)={0xf}) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000400)) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x48094) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000540)={0x79f2, 0x1, [{0x6}]}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000005c0), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004010) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000740), 0x62acdcf1ee2bdbc0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000007c0)={0x3, 0x0, &(0x7f0000000780)=[r6, r3, r8, r6]}, 0x4) r9 = openat$cgroup_ro(r2, &(0x7f0000000840)='cgroup.freeze\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r9) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000980)={0x1, 0x1, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)=""/104, 0x68}], &(0x7f0000000940)=[0x3f, 0x5, 0x4, 0xf20d, 0x7b, 0x7fffffff, 0x5c]}, 0x20) pipe2$watch_queue(&(0x7f00000009c0), 0x80) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x18, 0x140f, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000090}, 0x4) recvmsg$can_bcm(r2, &(0x7f0000002140)={&(0x7f0000000b00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000b80)=""/22, 0x16}, {&(0x7f0000000bc0)=""/192, 0xc0}, {&(0x7f0000000c80)=""/162, 0xa2}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/77, 0x4d}, {&(0x7f0000001dc0)=""/69, 0x45}, {&(0x7f0000001e40)=""/42, 0x2a}, {&(0x7f0000001e80)=""/32, 0x20}, {&(0x7f0000001ec0)=""/128, 0x80}, {&(0x7f0000001f40)=""/93, 0x5d}], 0xa, &(0x7f0000002080)=""/137, 0x89}, 0x10000) bind$llc(r4, &(0x7f0000002180)={0x1a,