Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:4112' (ECDSA) to the list of known hosts. 2026/01/15 03:41:18 fuzzer started 2026/01/15 03:41:19 dialing manager at localhost:46753 syzkaller login: [ 50.881831] cgroup: Unknown subsys name 'net' [ 50.969805] cgroup: Unknown subsys name 'cpuset' [ 50.987909] cgroup: Unknown subsys name 'rlimit' 2026/01/15 03:41:30 syscalls: 201 2026/01/15 03:41:30 code coverage: enabled 2026/01/15 03:41:30 comparison tracing: enabled 2026/01/15 03:41:30 extra coverage: enabled 2026/01/15 03:41:30 setuid sandbox: enabled 2026/01/15 03:41:30 namespace sandbox: enabled 2026/01/15 03:41:30 Android sandbox: enabled 2026/01/15 03:41:30 fault injection: enabled 2026/01/15 03:41:30 leak checking: enabled 2026/01/15 03:41:30 net packet injection: enabled 2026/01/15 03:41:30 net device setup: enabled 2026/01/15 03:41:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/15 03:41:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/15 03:41:30 USB emulation: enabled 2026/01/15 03:41:30 hci packet injection: enabled 2026/01/15 03:41:30 wifi device emulation: enabled 2026/01/15 03:41:30 802.15.4 emulation: enabled 2026/01/15 03:41:30 fetching corpus: 0, signal 0/0 (executing program) 2026/01/15 03:41:31 starting 8 fuzzer processes 03:41:31 executing program 0: ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x2, @time={0x2, 0xea}, 0x5, {0xff, 0x9}, 0x1, 0x0, 0xfe}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="6be510a4b1b7d6f3ae47feb9b0928abf1ccccbe96907549d359215d5b558275dde3d7731ab7576eb82fbab7b5854ef8775166db08fd7397d8eab8675cf88c4d79110f10cd275d05127239393fa8ee5f7b7ef4b8aeddf132322d43f8866954725d0dd9d36c3c842833e7bf2862eaabb80be9ff48a45b5df13c6f5ed8e3d566254dea8a67bb9c469ddc6a949620efa5001df1c504134cfcacc38af9130fe4a1021793f1b48d1428ac099b03b5ea5490396d326dc486d377e35bd014582299191f48c67a41ae36e35392ada9130a466467b031c14428b83d755283378fdd4", 0xdd) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) getsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x130, 0x218, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000340), {[{{@arp={@local, @multicast1, 0xff000000, 0xff000000, 0x0, 0x5, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x9, 0x0, 0x2, 0xfffd, 0x7, 0x2, 'wg2\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x0, 0x12c}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x10, 0x0, 0x8000, 0x0, 0x0, "643965a46e8c29e0614c68b7b80708d1cfeff60c9b837a71795c94df7326e1c3c9444c7b0307e606a29a6be7847b1c91aea22a50fd1dc73b9a6e62d5f8b6673b"}}}, {{@arp={@multicast1, @multicast2, 0xffffffff, 0xffffff00, 0xd, 0x4, {@mac, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x1fe, 0x0, 0xff, 0xff]}}, 0x5, 0xa20e, 0x1, 0x5d8, 0x800, 0x7, 'batadv_slave_0\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x158}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfff}}}, {{@arp={@broadcast, @local, 0xff000000, 0xff000000, 0x9, 0x9, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@random="49569efb6feb", {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x14b, 0x401, 0x1, 0x6, 0x7, 0x0, 'macsec0\x00', 'bridge0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000007c0)="93557b98b087e78b7a92d768033a64de1d5820d58a83ca91e0120d21fedce23ac62693ff4fdc3a42e956ca2f477fd986daea0b177051ca0572aa1b3432e3c3dd37bd76ad74d5280905b37ea148e5cafa29ae175932fabbb0203912478fe8e2cb51146b5734b6ce5e64971bd70417ca9e978e6685acb6acd9a4c45b1c10b7d799b39c905d8f0f30d80dd208c89872c918a7eec954605a31ab3a7521ac589d99579b8a5d66c3cd59c8ebc9ff83d0a23b9af8053db11e324129d9f3c75b294dbfbfdd1d622c97f21023b9fc73167ed5495f3696ececd412", 0xd6) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000008c0)="1dbf8779164187f70a0dd9e5f3779726d58f942cf280c529c46bfd351224b7b8b0d8310365e08330c3650858139a3be2715a74", 0x33) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x101402) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r2, 0x824, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40010) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000a80)={{{@in6=@local, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000b80)=0xe8) getegid() sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x988c, 0x7e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000cc0)={0x1f, 0x9, @none, 0x5, 0x2}, 0xe) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 03:41:31 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:wireless_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r1, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:netcontrol_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hostname_exec_t:s0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000880)={&(0x7f0000000300), 0xc, &(0x7f0000000840)={&(0x7f0000000340)={0x4f4, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x1e8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ID={0x69, 0x3, "c18a3be267c43f7048235680f5ea8772b35d740c63aff19c3baf23958f8c6706c492e826424dd5721eae7dbf6e438806d1c0b49c4e01da4af62533a0507467c9a6704b3f422cedc6056c0d3b99298a4353086c38d091b40ca34563499e82e167aba3eeda07"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd8, 0x3, "7909fe3809aa1298a7510eb16c58e7203a9c815663218fa9f3acfb0594ad75b599a559d2a6812baf8557bb00253c242375c91a04407e4932bb4afe9aecd4aa1a6295c29682ff5d9bbdc06db02f9dea867bca1f8fa44db742f2c1213060a0b77e88a53d01b68ca7c09779c989cb135fbf6418ee70acc73c44fdf4173608818249e023e21fba7da05deacfe18a1c5e53a28c85a866794c91821a9b20c992738cdda964ab69d3f0787e819379376e91d3c80bb0f3d0f0e72c569f78744d4f33bf297672e1f2db1f558a491c214769191b900cdca78b"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "c4e292246ee170ce803abfbc1c8b54d5438fccb8e75e2893e3c5c72e29d04b600b2e40"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "2d06a6153b1968ae9810ec9bd3245f94c7c8bec9c91ca75bf07c35255c1c54"}}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @remote, 0x1acdef88}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x101, @remote, 0xbce}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10001, @local, 0x7f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2d48bf2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x67, 0x3, "345fed761d1b84c86719323193c318a730bf61122221c1b6a0432e65ced336edfeb013eeaf7497d8fef803f8af10cfb2c3a313df1770fe9030ee63e54c7bb92538c0f48fccc668c6e2887320dfc8506281f158b97302f38717457493f51fdcc1d93dcc"}, @TIPC_NLA_NODE_ID={0x93, 0x3, "c8076e039f36af3ae398af63f04a3e13940e53f4e849a8bc9fee04625152f0e785d2dc92e31427a6a487a08335d4c23acd075a74d2998983090b956fc01aa161d41421d77cf30b4897e4da1d66a6cf84f0cbc77ae83b14d5021abdba8d72ffe6e6f39fd141d06bbce5a1ff6cac64b6ef29047dbfb4641532b23f7aa0b746dfa9b54ae56d1bbef8f1b81bfe015c7414"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x622a5a7a}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x805}, 0xc081) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x9) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000009c0)) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000a00)=@ccm_128={{0x304}, "4fff8127a957da17", "e46c67775e4828ff4ab1347329f54bb7", "e0e3e98b", "95cfd208dfb9589d"}, 0x28) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x7c, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:file_context_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44401}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000c00)=0x1, 0x4) r4 = socket(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c40)={'batadv_slave_1\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c80), 0x140, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20040047) 03:41:31 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="7081217bd282"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x23c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc007}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x91}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7584}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x756}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xcf, 0x3, "870c0637f58b9ac68f61ee0c6fd2bf3c66228133141269c2ae86f23d877320fd67390334bd888950862aa9323d152a63e4b52d56043c290c7ef1aa8fc4c13abef12bf7df7476665e3681c35c442e67a55600069d44200935231cfd6e90c4841b611c25593f351192f72d9c42d18c934c81446d6a8b6df6eb47ded2e3f7c89010ed458b5f165c10aedbe3ebf2545fd63a54a3d28370b5c56d90f086b65345c2aa67790a3064ea3e5b3492c5f77ef07570e53a5c0c59597a3ee335a4be4c0de0cea7bab9cae63bbb389e897d"}, @TIPC_NLA_NODE_ID={0x36, 0x3, "7e01def49f8b2189ffafa9bf57a01b513899b80f9b52d03bea3a4a15eade6116ddd4d448fcdc73ba475361c9667987e4fa8e"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x840) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x52}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) socketpair(0x28, 0x800, 0x2, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40020}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000900)={'wlan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000a80)={'gre0\x00', &(0x7f0000000980)={'erspan0\x00', r0, 0x700, 0x0, 0xfb6, 0x7, {{0x2d, 0x4, 0x3, 0x1b, 0xb4, 0x68, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x1c, 0x8, 0x3, 0x8, [{@broadcast, 0x6}, {@rand_addr=0x64010102, 0x3}, {@broadcast, 0x3ff}]}, @timestamp_prespec={0x44, 0x3c, 0xff, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x7ff}, {@multicast2, 0x4}, {@empty, 0x31}, {@private=0xa010102, 0x6a7c}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x25d}, {@rand_addr=0x64010100, 0x79}, {@multicast1, 0x100}]}, @ssrr={0x89, 0x1f, 0xa5, [@dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x29}, @remote, @broadcast, @rand_addr=0x64010101]}, @cipso={0x86, 0x1e, 0x2, [{0x1, 0x9, "68a9c8496a476f"}, {0x0, 0xf, "bb8f0e55bbb18822c0ab2156af"}]}, @end, @ssrr={0x89, 0x7, 0xc9, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa4, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4080}, 0x0) gettid() sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5b63}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0xc0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x75}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008044}, 0x8000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24004080) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000f80)={0x2d4, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb1b6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8cb7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x25}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x920}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x82}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8a5a}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x167}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff18e7}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x3f, @empty}}}}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff00000000}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x76, 0x3, "59bd5488e7741253b04c9dc968cec4b4b9bcd51aba3f0f2d95bb7368740e11f3ebb68a72ca2b6bf9ebc5bf6e83ae8bc1f0bcae56cb42ea15f425366ab00aaf45044a47f1f8019bf3ae7c80cb0362eb5a4879fd58ed63b29bcfe82c222b4a205199513a36c7f38fbc339bc643e82c9e83a951"}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x52cd8e00}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @empty, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x40}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40f8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000080) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f0000001340)={0xec, r1, 0x20, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x268}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7e599296}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc7cd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7a7}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdaad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x11}, 0x8800) 03:41:31 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socketpair(0x22, 0x1, 0xdb8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140), 0x4) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x6, 0xc000) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0xa49000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@afid={'afid', 0x3d, 0x80000001}}, {@cache_mmap}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/vcs\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@obj_user={'obj_user', 0x3d, '/dev/vcs\x00'}}, {@hash}]}}) r3 = fsmount(r0, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2049000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '%'}}, {@cache_fscache}], [{@fsname={'fsname', 0x3d, '^&*'}}, {@hash}, {@euid_lt={'euid<', r4}}, {@fsmagic={'fsmagic', 0x3d, 0xeaa}}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x90$@\\'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@fsname={'fsname', 0x3d, '/dev/vcs\x00'}}, {@subj_type={'subj_type', 0x3d, 'smackfshat'}}]}}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000600)=0x4, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040801}, 0x850) r6 = accept$inet(r3, 0x0, &(0x7f0000000780)) r7 = accept(r6, &(0x7f00000007c0)=@phonet, &(0x7f0000000840)=0x80) r8 = socket(0x3, 0x6, 0x3ff) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @mcast2, 0x4}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x11) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000802}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r9, 0xc30, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x35}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x234}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1f}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000830}, 0x4004044) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040840) fspick(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x0) 03:41:31 executing program 3: clock_gettime(0x6, &(0x7f0000000000)) clock_gettime(0x4, &(0x7f0000000040)) futex(&(0x7f0000000080), 0xd, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x2) setrlimit(0x9, &(0x7f0000000140)={0x1ff, 0x9}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0xfff, 0x2, 0x81, 0x44, 0x8, 0x5, 0x8, 0x9}, &(0x7f00000001c0)={0x9, 0x8, 0x5, 0x0, 0x3f, 0xe1, 0x5, 0x9}, &(0x7f0000000200)={0xd6e, 0xfa0, 0x9, 0x7, 0x4c, 0xffffffff00000001, 0x1, 0xc068}, &(0x7f0000000280)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) prctl$PR_GET_TSC(0x19, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000380)={0x3f, 0x516, 0x2, 0x7, 0x1000, 0x8, 0xfff, 0xffffffffffffffe1}, &(0x7f00000003c0)={0x5, 0xd4c, 0x6, 0xff, 0x8, 0x4, 0x1000, 0x8000}, &(0x7f0000000400)={0x8, 0x6, 0x2680000, 0x7, 0x338, 0x7f, 0x6, 0xffffffffffffffaf}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x3]}, 0x8}) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) futex(&(0x7f0000000540)=0x1, 0xb, 0x2, &(0x7f00000005c0)={r3, r4+10000000}, &(0x7f0000000600)=0x1, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000640)={0x3, 0x9, 0xffffffff, 0xce5b, 0x0, 0x7, 0x80000001, 0x8}, &(0x7f0000000680)={0x6, 0x2, 0x3, 0xfff, 0x5, 0x4, 0x100, 0x7ff}, &(0x7f00000006c0)={0x100000001, 0x401, 0x5, 0xb56, 0x8, 0x2, 0x80, 0x4}, &(0x7f0000000740)={r5, r6+10000000}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x401]}, 0x8}) pselect6(0x40, &(0x7f0000000800)={0x2, 0x8, 0xd37, 0x8, 0x7f, 0x4, 0x3ff8000, 0x68699eeb}, &(0x7f0000000840)={0x7, 0x8, 0x0, 0x9, 0x9, 0x40000, 0x7f, 0x1ae}, &(0x7f0000000880)={0x4305a51b, 0x1, 0x80000000, 0x1c00000000, 0xf5b, 0x7, 0x1, 0x8}, &(0x7f00000008c0)={0x0, 0x3938700}, &(0x7f0000000940)={&(0x7f0000000900)={[0x100000000]}, 0x8}) r7 = gettid() ioprio_get$pid(0x1, r7) clock_gettime(0x0, &(0x7f0000000980)) pselect6(0x40, &(0x7f00000009c0)={0xffffffffffff8001, 0x7fffffff, 0x1, 0x6, 0x5, 0xe8, 0x2, 0xffffffffffffff7f}, &(0x7f0000000a00)={0x15aa, 0x4, 0x3, 0xffffffff, 0xed, 0x7, 0xc0000, 0x2}, &(0x7f0000000a40)={0x6, 0x7, 0x80000000, 0x8, 0x5, 0x401, 0xfffffffffffff001, 0x3}, &(0x7f0000000a80)={0x77359400}, &(0x7f0000000b00)={&(0x7f0000000ac0), 0x8}) clock_gettime(0x0, &(0x7f0000000b40)) 03:41:31 executing program 4: socketpair(0x3c, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4041) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = accept(r0, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000001c0)=0x80) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc) r3 = socket(0x28, 0x6, 0x80000001) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000480)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r2) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x8, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8000041) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) r6 = accept(r2, &(0x7f00000006c0)=@phonet, &(0x7f0000000740)=0x80) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x15041}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00'}) socket(0x1f, 0x3, 0x0) r7 = fspick(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) getpeername(r2, &(0x7f0000000900)=@qipcrtr, &(0x7f0000000980)=0x80) mount$9p_fd(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80002, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@dfltuid}, {@version_u}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@aname={'aname', 0x3d, '!'}}, {@access_client}], [{@appraise}, {@dont_appraise}, {@measure}]}}) 03:41:31 executing program 5: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x4, 0x7, 0x58, 0x9, 0x1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x4, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x40, 0x7, 0x1, 0x1, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x66, 0x0, 0x3f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@cipso={0x86, 0x1a, 0x1, [{0x0, 0x7, "ae9745467a"}, {0x6, 0x8, "9b734a95d62f"}, {0x6, 0x5, "1c03eb"}]}]}}}}}) r3 = socket(0x2b, 0x2, 0xb06) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x6a2e, &(0x7f0000000240)={0x0, 0x49d1, 0x8, 0x0, 0x376}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xc000010, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000340)=0x1, 0x4) r6 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x4, 0x40, 0x9, 0xebde, 0x57, @local, @private1, 0x10, 0x8000, 0x10000, 0x3}}) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000440)=@gcm_256={{0x303}, "82c3b5d8d828df9d", "bc3a5c9368581c56183c0bfc22a359cf6b0b92f2a7b109a72f59b5588b207be8", "daf77a1e", "b6d0b148c5eb8963"}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x92b3654fc53f2c0f, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) accept4$bt_l2cap(r7, &(0x7f0000000540)={0x1f, 0x0, @fixed}, &(0x7f0000000580)=0xe, 0x80000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xa110}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0461c46e6632"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x200048c1}, 0x20000000) [ 61.637398] audit: type=1400 audit(1768448491.223:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:41:31 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040)) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000080)={0xffffffff7fffffff, 0xffffffee}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0xc, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x2000c000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4280}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x24000004) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) r1 = syz_open_dev$rtc(&(0x7f00000002c0), 0x8000, 0x20240) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000380)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x25c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x23c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x100, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2260}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xee}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x88b}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7a2d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700), 0x80000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xcc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x85}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x74}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r3, &(0x7f0000000a80)=@ll={0x11, 0x0, 0x0}, &(0x7f0000000b00)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000d00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc0}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) [ 62.822719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.824774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.827816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.830698] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.834724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.893982] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.896055] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.898562] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.899476] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.903284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.906853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.908385] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 62.911868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.914113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.914251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.916318] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.918037] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 62.918394] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.923992] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.924062] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.926891] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 62.928002] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 62.932703] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 62.935354] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.940125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.941905] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.944772] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 62.947672] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.949394] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 62.950586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.952606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.961572] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 62.987173] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.992865] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 62.995601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 62.998589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 63.008759] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 63.012750] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 63.042413] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 63.044155] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 64.854121] Bluetooth: hci0: command tx timeout [ 64.981958] Bluetooth: hci4: command tx timeout [ 64.982846] Bluetooth: hci6: command tx timeout [ 65.046720] Bluetooth: hci1: command tx timeout [ 65.047746] Bluetooth: hci2: command tx timeout [ 65.048814] Bluetooth: hci3: command tx timeout [ 65.111534] Bluetooth: hci5: command tx timeout [ 65.174550] Bluetooth: hci7: command tx timeout [ 66.902497] Bluetooth: hci0: command tx timeout [ 67.029573] Bluetooth: hci4: command tx timeout [ 67.030023] Bluetooth: hci6: command tx timeout [ 67.093574] Bluetooth: hci2: command tx timeout [ 67.094021] Bluetooth: hci1: command tx timeout [ 67.094395] Bluetooth: hci3: command tx timeout [ 67.158362] Bluetooth: hci5: command tx timeout [ 67.221516] Bluetooth: hci7: command tx timeout [ 68.950520] Bluetooth: hci0: command tx timeout [ 69.077568] Bluetooth: hci6: command tx timeout [ 69.078361] Bluetooth: hci4: command tx timeout [ 69.141674] Bluetooth: hci3: command tx timeout [ 69.142452] Bluetooth: hci1: command tx timeout [ 69.144361] Bluetooth: hci2: command tx timeout [ 69.206301] Bluetooth: hci5: command tx timeout [ 69.269708] Bluetooth: hci7: command tx timeout [ 70.997557] Bluetooth: hci0: command tx timeout [ 71.125521] Bluetooth: hci4: command tx timeout [ 71.125940] Bluetooth: hci6: command tx timeout [ 71.190496] Bluetooth: hci1: command tx timeout [ 71.190889] Bluetooth: hci2: command tx timeout [ 71.191265] Bluetooth: hci3: command tx timeout [ 71.254205] Bluetooth: hci5: command tx timeout [ 71.317813] Bluetooth: hci7: command tx timeout [ 97.005581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.006198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.470873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.471513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.099869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.101580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.223139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.223994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:42:08 executing program 5: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x4, 0x7, 0x58, 0x9, 0x1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x4, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x40, 0x7, 0x1, 0x1, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x66, 0x0, 0x3f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@cipso={0x86, 0x1a, 0x1, [{0x0, 0x7, "ae9745467a"}, {0x6, 0x8, "9b734a95d62f"}, {0x6, 0x5, "1c03eb"}]}]}}}}}) r3 = socket(0x2b, 0x2, 0xb06) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x6a2e, &(0x7f0000000240)={0x0, 0x49d1, 0x8, 0x0, 0x376}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xc000010, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000340)=0x1, 0x4) r6 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x4, 0x40, 0x9, 0xebde, 0x57, @local, @private1, 0x10, 0x8000, 0x10000, 0x3}}) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000440)=@gcm_256={{0x303}, "82c3b5d8d828df9d", "bc3a5c9368581c56183c0bfc22a359cf6b0b92f2a7b109a72f59b5588b207be8", "daf77a1e", "b6d0b148c5eb8963"}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x92b3654fc53f2c0f, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) accept4$bt_l2cap(r7, &(0x7f0000000540)={0x1f, 0x0, @fixed}, &(0x7f0000000580)=0xe, 0x80000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xa110}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0461c46e6632"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x200048c1}, 0x20000000) 03:42:08 executing program 5: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x4, 0x7, 0x58, 0x9, 0x1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x4, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x40, 0x7, 0x1, 0x1, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x66, 0x0, 0x3f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@cipso={0x86, 0x1a, 0x1, [{0x0, 0x7, "ae9745467a"}, {0x6, 0x8, "9b734a95d62f"}, {0x6, 0x5, "1c03eb"}]}]}}}}}) r3 = socket(0x2b, 0x2, 0xb06) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x6a2e, &(0x7f0000000240)={0x0, 0x49d1, 0x8, 0x0, 0x376}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xc000010, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000340)=0x1, 0x4) r6 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x4, 0x40, 0x9, 0xebde, 0x57, @local, @private1, 0x10, 0x8000, 0x10000, 0x3}}) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000440)=@gcm_256={{0x303}, "82c3b5d8d828df9d", "bc3a5c9368581c56183c0bfc22a359cf6b0b92f2a7b109a72f59b5588b207be8", "daf77a1e", "b6d0b148c5eb8963"}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x92b3654fc53f2c0f, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) accept4$bt_l2cap(r7, &(0x7f0000000540)={0x1f, 0x0, @fixed}, &(0x7f0000000580)=0xe, 0x80000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xa110}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0461c46e6632"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x200048c1}, 0x20000000) 03:42:08 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:wireless_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r1, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:netcontrol_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hostname_exec_t:s0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000880)={&(0x7f0000000300), 0xc, &(0x7f0000000840)={&(0x7f0000000340)={0x4f4, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x1e8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ID={0x69, 0x3, "c18a3be267c43f7048235680f5ea8772b35d740c63aff19c3baf23958f8c6706c492e826424dd5721eae7dbf6e438806d1c0b49c4e01da4af62533a0507467c9a6704b3f422cedc6056c0d3b99298a4353086c38d091b40ca34563499e82e167aba3eeda07"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd8, 0x3, "7909fe3809aa1298a7510eb16c58e7203a9c815663218fa9f3acfb0594ad75b599a559d2a6812baf8557bb00253c242375c91a04407e4932bb4afe9aecd4aa1a6295c29682ff5d9bbdc06db02f9dea867bca1f8fa44db742f2c1213060a0b77e88a53d01b68ca7c09779c989cb135fbf6418ee70acc73c44fdf4173608818249e023e21fba7da05deacfe18a1c5e53a28c85a866794c91821a9b20c992738cdda964ab69d3f0787e819379376e91d3c80bb0f3d0f0e72c569f78744d4f33bf297672e1f2db1f558a491c214769191b900cdca78b"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "c4e292246ee170ce803abfbc1c8b54d5438fccb8e75e2893e3c5c72e29d04b600b2e40"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "2d06a6153b1968ae9810ec9bd3245f94c7c8bec9c91ca75bf07c35255c1c54"}}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @remote, 0x1acdef88}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x101, @remote, 0xbce}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10001, @local, 0x7f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2d48bf2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x67, 0x3, "345fed761d1b84c86719323193c318a730bf61122221c1b6a0432e65ced336edfeb013eeaf7497d8fef803f8af10cfb2c3a313df1770fe9030ee63e54c7bb92538c0f48fccc668c6e2887320dfc8506281f158b97302f38717457493f51fdcc1d93dcc"}, @TIPC_NLA_NODE_ID={0x93, 0x3, "c8076e039f36af3ae398af63f04a3e13940e53f4e849a8bc9fee04625152f0e785d2dc92e31427a6a487a08335d4c23acd075a74d2998983090b956fc01aa161d41421d77cf30b4897e4da1d66a6cf84f0cbc77ae83b14d5021abdba8d72ffe6e6f39fd141d06bbce5a1ff6cac64b6ef29047dbfb4641532b23f7aa0b746dfa9b54ae56d1bbef8f1b81bfe015c7414"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x622a5a7a}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x805}, 0xc081) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x9) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000009c0)) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000a00)=@ccm_128={{0x304}, "4fff8127a957da17", "e46c67775e4828ff4ab1347329f54bb7", "e0e3e98b", "95cfd208dfb9589d"}, 0x28) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x7c, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:file_context_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44401}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000c00)=0x1, 0x4) r4 = socket(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c40)={'batadv_slave_1\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c80), 0x140, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20040047) 03:42:08 executing program 5: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x4, 0x7, 0x58, 0x9, 0x1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x4, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x40, 0x7, 0x1, 0x1, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x66, 0x0, 0x3f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@cipso={0x86, 0x1a, 0x1, [{0x0, 0x7, "ae9745467a"}, {0x6, 0x8, "9b734a95d62f"}, {0x6, 0x5, "1c03eb"}]}]}}}}}) r3 = socket(0x2b, 0x2, 0xb06) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x6a2e, &(0x7f0000000240)={0x0, 0x49d1, 0x8, 0x0, 0x376}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xc000010, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000340)=0x1, 0x4) r6 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x4, 0x40, 0x9, 0xebde, 0x57, @local, @private1, 0x10, 0x8000, 0x10000, 0x3}}) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000440)=@gcm_256={{0x303}, "82c3b5d8d828df9d", "bc3a5c9368581c56183c0bfc22a359cf6b0b92f2a7b109a72f59b5588b207be8", "daf77a1e", "b6d0b148c5eb8963"}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x92b3654fc53f2c0f, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) accept4$bt_l2cap(r7, &(0x7f0000000540)={0x1f, 0x0, @fixed}, &(0x7f0000000580)=0xe, 0x80000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xa110}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r8, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0461c46e6632"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x200048c1}, 0x20000000) [ 98.967344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.968406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:42:08 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:wireless_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r1, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:netcontrol_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hostname_exec_t:s0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000880)={&(0x7f0000000300), 0xc, &(0x7f0000000840)={&(0x7f0000000340)={0x4f4, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x1e8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ID={0x69, 0x3, "c18a3be267c43f7048235680f5ea8772b35d740c63aff19c3baf23958f8c6706c492e826424dd5721eae7dbf6e438806d1c0b49c4e01da4af62533a0507467c9a6704b3f422cedc6056c0d3b99298a4353086c38d091b40ca34563499e82e167aba3eeda07"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd8, 0x3, "7909fe3809aa1298a7510eb16c58e7203a9c815663218fa9f3acfb0594ad75b599a559d2a6812baf8557bb00253c242375c91a04407e4932bb4afe9aecd4aa1a6295c29682ff5d9bbdc06db02f9dea867bca1f8fa44db742f2c1213060a0b77e88a53d01b68ca7c09779c989cb135fbf6418ee70acc73c44fdf4173608818249e023e21fba7da05deacfe18a1c5e53a28c85a866794c91821a9b20c992738cdda964ab69d3f0787e819379376e91d3c80bb0f3d0f0e72c569f78744d4f33bf297672e1f2db1f558a491c214769191b900cdca78b"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "c4e292246ee170ce803abfbc1c8b54d5438fccb8e75e2893e3c5c72e29d04b600b2e40"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "2d06a6153b1968ae9810ec9bd3245f94c7c8bec9c91ca75bf07c35255c1c54"}}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @remote, 0x1acdef88}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x101, @remote, 0xbce}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10001, @local, 0x7f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2d48bf2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x67, 0x3, "345fed761d1b84c86719323193c318a730bf61122221c1b6a0432e65ced336edfeb013eeaf7497d8fef803f8af10cfb2c3a313df1770fe9030ee63e54c7bb92538c0f48fccc668c6e2887320dfc8506281f158b97302f38717457493f51fdcc1d93dcc"}, @TIPC_NLA_NODE_ID={0x93, 0x3, "c8076e039f36af3ae398af63f04a3e13940e53f4e849a8bc9fee04625152f0e785d2dc92e31427a6a487a08335d4c23acd075a74d2998983090b956fc01aa161d41421d77cf30b4897e4da1d66a6cf84f0cbc77ae83b14d5021abdba8d72ffe6e6f39fd141d06bbce5a1ff6cac64b6ef29047dbfb4641532b23f7aa0b746dfa9b54ae56d1bbef8f1b81bfe015c7414"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x622a5a7a}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x805}, 0xc081) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x9) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000009c0)) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000a00)=@ccm_128={{0x304}, "4fff8127a957da17", "e46c67775e4828ff4ab1347329f54bb7", "e0e3e98b", "95cfd208dfb9589d"}, 0x28) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x7c, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:file_context_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44401}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000c00)=0x1, 0x4) r4 = socket(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c40)={'batadv_slave_1\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c80), 0x140, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20040047) [ 99.215874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.217452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:42:08 executing program 5: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x4, 0x7, 0x58, 0x9, 0x1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x4, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x40, 0x7, 0x1, 0x1, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x66, 0x0, 0x3f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@cipso={0x86, 0x1a, 0x1, [{0x0, 0x7, "ae9745467a"}, {0x6, 0x8, "9b734a95d62f"}, {0x6, 0x5, "1c03eb"}]}]}}}}}) r3 = socket(0x2b, 0x2, 0xb06) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x6a2e, &(0x7f0000000240)={0x0, 0x49d1, 0x8, 0x0, 0x376}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xc000010, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000340)=0x1, 0x4) r6 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x4, 0x40, 0x9, 0xebde, 0x57, @local, @private1, 0x10, 0x8000, 0x10000, 0x3}}) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000440)=@gcm_256={{0x303}, "82c3b5d8d828df9d", "bc3a5c9368581c56183c0bfc22a359cf6b0b92f2a7b109a72f59b5588b207be8", "daf77a1e", "b6d0b148c5eb8963"}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x92b3654fc53f2c0f, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) accept4$bt_l2cap(r7, &(0x7f0000000540)={0x1f, 0x0, @fixed}, &(0x7f0000000580)=0xe, 0x80000) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xa110}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0461c46e6632"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x200048c1}, 0x20000000) [ 99.396595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.397214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:42:09 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:wireless_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r1, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:netcontrol_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hostname_exec_t:s0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000880)={&(0x7f0000000300), 0xc, &(0x7f0000000840)={&(0x7f0000000340)={0x4f4, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x1e8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ID={0x69, 0x3, "c18a3be267c43f7048235680f5ea8772b35d740c63aff19c3baf23958f8c6706c492e826424dd5721eae7dbf6e438806d1c0b49c4e01da4af62533a0507467c9a6704b3f422cedc6056c0d3b99298a4353086c38d091b40ca34563499e82e167aba3eeda07"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd8, 0x3, "7909fe3809aa1298a7510eb16c58e7203a9c815663218fa9f3acfb0594ad75b599a559d2a6812baf8557bb00253c242375c91a04407e4932bb4afe9aecd4aa1a6295c29682ff5d9bbdc06db02f9dea867bca1f8fa44db742f2c1213060a0b77e88a53d01b68ca7c09779c989cb135fbf6418ee70acc73c44fdf4173608818249e023e21fba7da05deacfe18a1c5e53a28c85a866794c91821a9b20c992738cdda964ab69d3f0787e819379376e91d3c80bb0f3d0f0e72c569f78744d4f33bf297672e1f2db1f558a491c214769191b900cdca78b"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "c4e292246ee170ce803abfbc1c8b54d5438fccb8e75e2893e3c5c72e29d04b600b2e40"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "2d06a6153b1968ae9810ec9bd3245f94c7c8bec9c91ca75bf07c35255c1c54"}}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @remote, 0x1acdef88}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x101, @remote, 0xbce}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10001, @local, 0x7f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2d48bf2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x67, 0x3, "345fed761d1b84c86719323193c318a730bf61122221c1b6a0432e65ced336edfeb013eeaf7497d8fef803f8af10cfb2c3a313df1770fe9030ee63e54c7bb92538c0f48fccc668c6e2887320dfc8506281f158b97302f38717457493f51fdcc1d93dcc"}, @TIPC_NLA_NODE_ID={0x93, 0x3, "c8076e039f36af3ae398af63f04a3e13940e53f4e849a8bc9fee04625152f0e785d2dc92e31427a6a487a08335d4c23acd075a74d2998983090b956fc01aa161d41421d77cf30b4897e4da1d66a6cf84f0cbc77ae83b14d5021abdba8d72ffe6e6f39fd141d06bbce5a1ff6cac64b6ef29047dbfb4641532b23f7aa0b746dfa9b54ae56d1bbef8f1b81bfe015c7414"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x622a5a7a}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x805}, 0xc081) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x9) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000009c0)) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000a00)=@ccm_128={{0x304}, "4fff8127a957da17", "e46c67775e4828ff4ab1347329f54bb7", "e0e3e98b", "95cfd208dfb9589d"}, 0x28) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x7c, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:file_context_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44401}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000c00)=0x1, 0x4) r4 = socket(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c40)={'batadv_slave_1\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c80), 0x140, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20040047) [ 99.485502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.486079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:42:09 executing program 5: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x4, 0x7, 0x58, 0x9, 0x1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x4, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x40, 0x7, 0x1, 0x1, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x66, 0x0, 0x3f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@cipso={0x86, 0x1a, 0x1, [{0x0, 0x7, "ae9745467a"}, {0x6, 0x8, "9b734a95d62f"}, {0x6, 0x5, "1c03eb"}]}]}}}}}) r3 = socket(0x2b, 0x2, 0xb06) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x6a2e, &(0x7f0000000240)={0x0, 0x49d1, 0x8, 0x0, 0x376}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xc000010, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000340)=0x1, 0x4) r6 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x4, 0x40, 0x9, 0xebde, 0x57, @local, @private1, 0x10, 0x8000, 0x10000, 0x3}}) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000440)=@gcm_256={{0x303}, "82c3b5d8d828df9d", "bc3a5c9368581c56183c0bfc22a359cf6b0b92f2a7b109a72f59b5588b207be8", "daf77a1e", "b6d0b148c5eb8963"}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x92b3654fc53f2c0f, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xa110}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0461c46e6632"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x200048c1}, 0x20000000) [ 99.568632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.569248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.637780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.638385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.712861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.713516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.790883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.791768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.825003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.825953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.986451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.987089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.040442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.041057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.151346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.152823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.177855] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.755017] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.756197] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.769428] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.773356] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.778637] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.783433] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.788086] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.788651] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.797179] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.806354] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.807742] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.819251] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.825072] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 100.825950] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 100.832878] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 100.837270] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 100.840281] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 100.852175] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 100.858459] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 100.859378] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 100.865628] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 100.870896] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 100.872962] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 100.877104] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 101.782506] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.806521] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.806560] Bluetooth: hci1: command 0x0c1a tx timeout [ 102.869657] Bluetooth: hci6: command 0x0c1a tx timeout [ 102.870516] Bluetooth: hci5: command 0x0c1a tx timeout [ 102.870723] Bluetooth: hci4: command 0x0c1a tx timeout [ 102.871423] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.934564] Bluetooth: hci7: command 0x0c1a tx timeout [ 103.830517] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.854520] Bluetooth: hci1: command 0x0c1a tx timeout [ 104.854566] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.918549] Bluetooth: hci4: command 0x0c1a tx timeout [ 104.918646] Bluetooth: hci5: command 0x0c1a tx timeout [ 104.919375] Bluetooth: hci6: command 0x0c1a tx timeout [ 104.920399] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.981610] Bluetooth: hci7: command 0x0c1a tx timeout [ 105.878514] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.902583] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.903556] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.966559] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.966631] Bluetooth: hci6: command 0x0c1a tx timeout [ 106.967387] Bluetooth: hci5: command 0x0c1a tx timeout [ 106.968439] Bluetooth: hci4: command 0x0c1a tx timeout [ 107.029625] Bluetooth: hci7: command 0x0c1a tx timeout 03:42:23 executing program 5: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x4, 0x7, 0x58, 0x9, 0x1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x4, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x40, 0x7, 0x1, 0x1, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x66, 0x0, 0x3f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@cipso={0x86, 0x1a, 0x1, [{0x0, 0x7, "ae9745467a"}, {0x6, 0x8, "9b734a95d62f"}, {0x6, 0x5, "1c03eb"}]}]}}}}}) r3 = socket(0x2b, 0x2, 0xb06) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x6a2e, &(0x7f0000000240)={0x0, 0x49d1, 0x8, 0x0, 0x376}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xc000010, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000340)=0x1, 0x4) r6 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x4, 0x40, 0x9, 0xebde, 0x57, @local, @private1, 0x10, 0x8000, 0x10000, 0x3}}) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000440)=@gcm_256={{0x303}, "82c3b5d8d828df9d", "bc3a5c9368581c56183c0bfc22a359cf6b0b92f2a7b109a72f59b5588b207be8", "daf77a1e", "b6d0b148c5eb8963"}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x92b3654fc53f2c0f, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xa110}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0461c46e6632"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x200048c1}, 0x20000000) 03:42:23 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="7081217bd282"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x23c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc007}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x91}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7584}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x756}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xcf, 0x3, "870c0637f58b9ac68f61ee0c6fd2bf3c66228133141269c2ae86f23d877320fd67390334bd888950862aa9323d152a63e4b52d56043c290c7ef1aa8fc4c13abef12bf7df7476665e3681c35c442e67a55600069d44200935231cfd6e90c4841b611c25593f351192f72d9c42d18c934c81446d6a8b6df6eb47ded2e3f7c89010ed458b5f165c10aedbe3ebf2545fd63a54a3d28370b5c56d90f086b65345c2aa67790a3064ea3e5b3492c5f77ef07570e53a5c0c59597a3ee335a4be4c0de0cea7bab9cae63bbb389e897d"}, @TIPC_NLA_NODE_ID={0x36, 0x3, "7e01def49f8b2189ffafa9bf57a01b513899b80f9b52d03bea3a4a15eade6116ddd4d448fcdc73ba475361c9667987e4fa8e"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x840) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x52}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) socketpair(0x28, 0x800, 0x2, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40020}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000900)={'wlan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000a80)={'gre0\x00', &(0x7f0000000980)={'erspan0\x00', r0, 0x700, 0x0, 0xfb6, 0x7, {{0x2d, 0x4, 0x3, 0x1b, 0xb4, 0x68, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x1c, 0x8, 0x3, 0x8, [{@broadcast, 0x6}, {@rand_addr=0x64010102, 0x3}, {@broadcast, 0x3ff}]}, @timestamp_prespec={0x44, 0x3c, 0xff, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x7ff}, {@multicast2, 0x4}, {@empty, 0x31}, {@private=0xa010102, 0x6a7c}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x25d}, {@rand_addr=0x64010100, 0x79}, {@multicast1, 0x100}]}, @ssrr={0x89, 0x1f, 0xa5, [@dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x29}, @remote, @broadcast, @rand_addr=0x64010101]}, @cipso={0x86, 0x1e, 0x2, [{0x1, 0x9, "68a9c8496a476f"}, {0x0, 0xf, "bb8f0e55bbb18822c0ab2156af"}]}, @end, @ssrr={0x89, 0x7, 0xc9, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa4, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4080}, 0x0) gettid() sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5b63}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0xc0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x75}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008044}, 0x8000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24004080) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000f80)={0x2d4, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb1b6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8cb7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x25}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x920}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x82}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8a5a}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x167}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff18e7}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x3f, @empty}}}}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff00000000}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x76, 0x3, "59bd5488e7741253b04c9dc968cec4b4b9bcd51aba3f0f2d95bb7368740e11f3ebb68a72ca2b6bf9ebc5bf6e83ae8bc1f0bcae56cb42ea15f425366ab00aaf45044a47f1f8019bf3ae7c80cb0362eb5a4879fd58ed63b29bcfe82c222b4a205199513a36c7f38fbc339bc643e82c9e83a951"}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x52cd8e00}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @empty, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x40}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40f8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000080) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f0000001340)={0xec, r1, 0x20, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x268}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7e599296}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc7cd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7a7}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdaad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x11}, 0x8800) 03:42:23 executing program 3: clock_gettime(0x6, &(0x7f0000000000)) clock_gettime(0x4, &(0x7f0000000040)) futex(&(0x7f0000000080), 0xd, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x2) setrlimit(0x9, &(0x7f0000000140)={0x1ff, 0x9}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0xfff, 0x2, 0x81, 0x44, 0x8, 0x5, 0x8, 0x9}, &(0x7f00000001c0)={0x9, 0x8, 0x5, 0x0, 0x3f, 0xe1, 0x5, 0x9}, &(0x7f0000000200)={0xd6e, 0xfa0, 0x9, 0x7, 0x4c, 0xffffffff00000001, 0x1, 0xc068}, &(0x7f0000000280)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) prctl$PR_GET_TSC(0x19, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000380)={0x3f, 0x516, 0x2, 0x7, 0x1000, 0x8, 0xfff, 0xffffffffffffffe1}, &(0x7f00000003c0)={0x5, 0xd4c, 0x6, 0xff, 0x8, 0x4, 0x1000, 0x8000}, &(0x7f0000000400)={0x8, 0x6, 0x2680000, 0x7, 0x338, 0x7f, 0x6, 0xffffffffffffffaf}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x3]}, 0x8}) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) futex(&(0x7f0000000540)=0x1, 0xb, 0x2, &(0x7f00000005c0)={r3, r4+10000000}, &(0x7f0000000600)=0x1, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000640)={0x3, 0x9, 0xffffffff, 0xce5b, 0x0, 0x7, 0x80000001, 0x8}, &(0x7f0000000680)={0x6, 0x2, 0x3, 0xfff, 0x5, 0x4, 0x100, 0x7ff}, &(0x7f00000006c0)={0x100000001, 0x401, 0x5, 0xb56, 0x8, 0x2, 0x80, 0x4}, &(0x7f0000000740)={r5, r6+10000000}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x401]}, 0x8}) pselect6(0x40, &(0x7f0000000800)={0x2, 0x8, 0xd37, 0x8, 0x7f, 0x4, 0x3ff8000, 0x68699eeb}, &(0x7f0000000840)={0x7, 0x8, 0x0, 0x9, 0x9, 0x40000, 0x7f, 0x1ae}, &(0x7f0000000880)={0x4305a51b, 0x1, 0x80000000, 0x1c00000000, 0xf5b, 0x7, 0x1, 0x8}, &(0x7f00000008c0)={0x0, 0x3938700}, &(0x7f0000000940)={&(0x7f0000000900)={[0x100000000]}, 0x8}) r7 = gettid() ioprio_get$pid(0x1, r7) clock_gettime(0x0, &(0x7f0000000980)) pselect6(0x40, &(0x7f00000009c0)={0xffffffffffff8001, 0x7fffffff, 0x1, 0x6, 0x5, 0xe8, 0x2, 0xffffffffffffff7f}, &(0x7f0000000a00)={0x15aa, 0x4, 0x3, 0xffffffff, 0xed, 0x7, 0xc0000, 0x2}, &(0x7f0000000a40)={0x6, 0x7, 0x80000000, 0x8, 0x5, 0x401, 0xfffffffffffff001, 0x3}, &(0x7f0000000a80)={0x77359400}, &(0x7f0000000b00)={&(0x7f0000000ac0), 0x8}) clock_gettime(0x0, &(0x7f0000000b40)) 03:42:23 executing program 0: ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x2, @time={0x2, 0xea}, 0x5, {0xff, 0x9}, 0x1, 0x0, 0xfe}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="6be510a4b1b7d6f3ae47feb9b0928abf1ccccbe96907549d359215d5b558275dde3d7731ab7576eb82fbab7b5854ef8775166db08fd7397d8eab8675cf88c4d79110f10cd275d05127239393fa8ee5f7b7ef4b8aeddf132322d43f8866954725d0dd9d36c3c842833e7bf2862eaabb80be9ff48a45b5df13c6f5ed8e3d566254dea8a67bb9c469ddc6a949620efa5001df1c504134cfcacc38af9130fe4a1021793f1b48d1428ac099b03b5ea5490396d326dc486d377e35bd014582299191f48c67a41ae36e35392ada9130a466467b031c14428b83d755283378fdd4", 0xdd) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) getsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x130, 0x218, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000340), {[{{@arp={@local, @multicast1, 0xff000000, 0xff000000, 0x0, 0x5, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x9, 0x0, 0x2, 0xfffd, 0x7, 0x2, 'wg2\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x0, 0x12c}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x10, 0x0, 0x8000, 0x0, 0x0, "643965a46e8c29e0614c68b7b80708d1cfeff60c9b837a71795c94df7326e1c3c9444c7b0307e606a29a6be7847b1c91aea22a50fd1dc73b9a6e62d5f8b6673b"}}}, {{@arp={@multicast1, @multicast2, 0xffffffff, 0xffffff00, 0xd, 0x4, {@mac, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x1fe, 0x0, 0xff, 0xff]}}, 0x5, 0xa20e, 0x1, 0x5d8, 0x800, 0x7, 'batadv_slave_0\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x158}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfff}}}, {{@arp={@broadcast, @local, 0xff000000, 0xff000000, 0x9, 0x9, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@random="49569efb6feb", {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x14b, 0x401, 0x1, 0x6, 0x7, 0x0, 'macsec0\x00', 'bridge0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000007c0)="93557b98b087e78b7a92d768033a64de1d5820d58a83ca91e0120d21fedce23ac62693ff4fdc3a42e956ca2f477fd986daea0b177051ca0572aa1b3432e3c3dd37bd76ad74d5280905b37ea148e5cafa29ae175932fabbb0203912478fe8e2cb51146b5734b6ce5e64971bd70417ca9e978e6685acb6acd9a4c45b1c10b7d799b39c905d8f0f30d80dd208c89872c918a7eec954605a31ab3a7521ac589d99579b8a5d66c3cd59c8ebc9ff83d0a23b9af8053db11e324129d9f3c75b294dbfbfdd1d622c97f21023b9fc73167ed5495f3696ececd412", 0xd6) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000008c0)="1dbf8779164187f70a0dd9e5f3779726d58f942cf280c529c46bfd351224b7b8b0d8310365e08330c3650858139a3be2715a74", 0x33) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x101402) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r2, 0x824, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40010) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000a80)={{{@in6=@local, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000b80)=0xe8) getegid() sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x988c, 0x7e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000cc0)={0x1f, 0x9, @none, 0x5, 0x2}, 0xe) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 03:42:23 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:wireless_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r1, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:netcontrol_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hostname_exec_t:s0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000880)={&(0x7f0000000300), 0xc, &(0x7f0000000840)={&(0x7f0000000340)={0x4f4, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x1e8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ID={0x69, 0x3, "c18a3be267c43f7048235680f5ea8772b35d740c63aff19c3baf23958f8c6706c492e826424dd5721eae7dbf6e438806d1c0b49c4e01da4af62533a0507467c9a6704b3f422cedc6056c0d3b99298a4353086c38d091b40ca34563499e82e167aba3eeda07"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd8, 0x3, "7909fe3809aa1298a7510eb16c58e7203a9c815663218fa9f3acfb0594ad75b599a559d2a6812baf8557bb00253c242375c91a04407e4932bb4afe9aecd4aa1a6295c29682ff5d9bbdc06db02f9dea867bca1f8fa44db742f2c1213060a0b77e88a53d01b68ca7c09779c989cb135fbf6418ee70acc73c44fdf4173608818249e023e21fba7da05deacfe18a1c5e53a28c85a866794c91821a9b20c992738cdda964ab69d3f0787e819379376e91d3c80bb0f3d0f0e72c569f78744d4f33bf297672e1f2db1f558a491c214769191b900cdca78b"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "c4e292246ee170ce803abfbc1c8b54d5438fccb8e75e2893e3c5c72e29d04b600b2e40"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "2d06a6153b1968ae9810ec9bd3245f94c7c8bec9c91ca75bf07c35255c1c54"}}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @remote, 0x1acdef88}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x101, @remote, 0xbce}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10001, @local, 0x7f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2d48bf2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x67, 0x3, "345fed761d1b84c86719323193c318a730bf61122221c1b6a0432e65ced336edfeb013eeaf7497d8fef803f8af10cfb2c3a313df1770fe9030ee63e54c7bb92538c0f48fccc668c6e2887320dfc8506281f158b97302f38717457493f51fdcc1d93dcc"}, @TIPC_NLA_NODE_ID={0x93, 0x3, "c8076e039f36af3ae398af63f04a3e13940e53f4e849a8bc9fee04625152f0e785d2dc92e31427a6a487a08335d4c23acd075a74d2998983090b956fc01aa161d41421d77cf30b4897e4da1d66a6cf84f0cbc77ae83b14d5021abdba8d72ffe6e6f39fd141d06bbce5a1ff6cac64b6ef29047dbfb4641532b23f7aa0b746dfa9b54ae56d1bbef8f1b81bfe015c7414"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x622a5a7a}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x805}, 0xc081) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x9) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000009c0)) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000a00)=@ccm_128={{0x304}, "4fff8127a957da17", "e46c67775e4828ff4ab1347329f54bb7", "e0e3e98b", "95cfd208dfb9589d"}, 0x28) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x7c, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:file_context_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44401}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000c00)=0x1, 0x4) r4 = socket(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c40)={'batadv_slave_1\x00'}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c80), 0x140, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20040047) 03:42:23 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socketpair(0x22, 0x1, 0xdb8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140), 0x4) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x6, 0xc000) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0xa49000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@afid={'afid', 0x3d, 0x80000001}}, {@cache_mmap}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/vcs\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@obj_user={'obj_user', 0x3d, '/dev/vcs\x00'}}, {@hash}]}}) r3 = fsmount(r0, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2049000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '%'}}, {@cache_fscache}], [{@fsname={'fsname', 0x3d, '^&*'}}, {@hash}, {@euid_lt={'euid<', r4}}, {@fsmagic={'fsmagic', 0x3d, 0xeaa}}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x90$@\\'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@fsname={'fsname', 0x3d, '/dev/vcs\x00'}}, {@subj_type={'subj_type', 0x3d, 'smackfshat'}}]}}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000600)=0x4, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040801}, 0x850) r6 = accept$inet(r3, 0x0, &(0x7f0000000780)) r7 = accept(r6, &(0x7f00000007c0)=@phonet, &(0x7f0000000840)=0x80) r8 = socket(0x3, 0x6, 0x3ff) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @mcast2, 0x4}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x11) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000802}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r9, 0xc30, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x35}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x234}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1f}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000830}, 0x4004044) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040840) fspick(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x0) 03:42:23 executing program 4: socketpair(0x3c, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4041) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = accept(r0, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000001c0)=0x80) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc) r3 = socket(0x28, 0x6, 0x80000001) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000480)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r2) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x8, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8000041) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) r6 = accept(r2, &(0x7f00000006c0)=@phonet, &(0x7f0000000740)=0x80) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x15041}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00'}) socket(0x1f, 0x3, 0x0) r7 = fspick(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) getpeername(r2, &(0x7f0000000900)=@qipcrtr, &(0x7f0000000980)=0x80) mount$9p_fd(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80002, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@dfltuid}, {@version_u}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@aname={'aname', 0x3d, '!'}}, {@access_client}], [{@appraise}, {@dont_appraise}, {@measure}]}}) 03:42:23 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040)) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000080)={0xffffffff7fffffff, 0xffffffee}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0xc, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x2000c000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4280}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x24000004) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) r1 = syz_open_dev$rtc(&(0x7f00000002c0), 0x8000, 0x20240) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000380)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x25c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x23c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x100, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2260}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xee}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x88b}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7a2d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700), 0x80000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xcc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x85}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x74}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r3, &(0x7f0000000a80)=@ll={0x11, 0x0, 0x0}, &(0x7f0000000b00)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000d00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc0}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 03:42:23 executing program 3: clock_gettime(0x6, &(0x7f0000000000)) clock_gettime(0x4, &(0x7f0000000040)) futex(&(0x7f0000000080), 0xd, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x2) setrlimit(0x9, &(0x7f0000000140)={0x1ff, 0x9}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0xfff, 0x2, 0x81, 0x44, 0x8, 0x5, 0x8, 0x9}, &(0x7f00000001c0)={0x9, 0x8, 0x5, 0x0, 0x3f, 0xe1, 0x5, 0x9}, &(0x7f0000000200)={0xd6e, 0xfa0, 0x9, 0x7, 0x4c, 0xffffffff00000001, 0x1, 0xc068}, &(0x7f0000000280)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) prctl$PR_GET_TSC(0x19, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000380)={0x3f, 0x516, 0x2, 0x7, 0x1000, 0x8, 0xfff, 0xffffffffffffffe1}, &(0x7f00000003c0)={0x5, 0xd4c, 0x6, 0xff, 0x8, 0x4, 0x1000, 0x8000}, &(0x7f0000000400)={0x8, 0x6, 0x2680000, 0x7, 0x338, 0x7f, 0x6, 0xffffffffffffffaf}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x3]}, 0x8}) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) futex(&(0x7f0000000540)=0x1, 0xb, 0x2, &(0x7f00000005c0)={r3, r4+10000000}, &(0x7f0000000600)=0x1, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000640)={0x3, 0x9, 0xffffffff, 0xce5b, 0x0, 0x7, 0x80000001, 0x8}, &(0x7f0000000680)={0x6, 0x2, 0x3, 0xfff, 0x5, 0x4, 0x100, 0x7ff}, &(0x7f00000006c0)={0x100000001, 0x401, 0x5, 0xb56, 0x8, 0x2, 0x80, 0x4}, &(0x7f0000000740)={r5, r6+10000000}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x401]}, 0x8}) pselect6(0x40, &(0x7f0000000800)={0x2, 0x8, 0xd37, 0x8, 0x7f, 0x4, 0x3ff8000, 0x68699eeb}, &(0x7f0000000840)={0x7, 0x8, 0x0, 0x9, 0x9, 0x40000, 0x7f, 0x1ae}, &(0x7f0000000880)={0x4305a51b, 0x1, 0x80000000, 0x1c00000000, 0xf5b, 0x7, 0x1, 0x8}, &(0x7f00000008c0)={0x0, 0x3938700}, &(0x7f0000000940)={&(0x7f0000000900)={[0x100000000]}, 0x8}) r7 = gettid() ioprio_get$pid(0x1, r7) clock_gettime(0x0, &(0x7f0000000980)) pselect6(0x40, &(0x7f00000009c0)={0xffffffffffff8001, 0x7fffffff, 0x1, 0x6, 0x5, 0xe8, 0x2, 0xffffffffffffff7f}, &(0x7f0000000a00)={0x15aa, 0x4, 0x3, 0xffffffff, 0xed, 0x7, 0xc0000, 0x2}, &(0x7f0000000a40)={0x6, 0x7, 0x80000000, 0x8, 0x5, 0x401, 0xfffffffffffff001, 0x3}, &(0x7f0000000a80)={0x77359400}, &(0x7f0000000b00)={&(0x7f0000000ac0), 0x8}) clock_gettime(0x0, &(0x7f0000000b40)) 03:42:23 executing program 4: socketpair(0x3c, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4041) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = accept(r0, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000001c0)=0x80) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc) r3 = socket(0x28, 0x6, 0x80000001) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000480)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r2) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x8, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8000041) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) r6 = accept(r2, &(0x7f00000006c0)=@phonet, &(0x7f0000000740)=0x80) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x15041}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00'}) socket(0x1f, 0x3, 0x0) r7 = fspick(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) getpeername(r2, &(0x7f0000000900)=@qipcrtr, &(0x7f0000000980)=0x80) mount$9p_fd(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80002, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@dfltuid}, {@version_u}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@aname={'aname', 0x3d, '!'}}, {@access_client}], [{@appraise}, {@dont_appraise}, {@measure}]}}) [ 114.717584] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.718354] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.720005] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.721411] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.722871] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 114.723865] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 114.724928] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 114.725953] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 115.925580] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.757656] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.758536] Bluetooth: hci7: command 0x0c1a tx timeout [ 116.758671] Bluetooth: hci6: command 0x0c1a tx timeout [ 116.759584] Bluetooth: hci5: command 0x0c1a tx timeout [ 116.760580] Bluetooth: hci4: command 0x0c1a tx timeout [ 116.761441] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.762334] Bluetooth: hci2: command 0x0c1a tx timeout 03:42:32 executing program 3: clock_gettime(0x6, &(0x7f0000000000)) clock_gettime(0x4, &(0x7f0000000040)) futex(&(0x7f0000000080), 0xd, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x2) setrlimit(0x9, &(0x7f0000000140)={0x1ff, 0x9}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0xfff, 0x2, 0x81, 0x44, 0x8, 0x5, 0x8, 0x9}, &(0x7f00000001c0)={0x9, 0x8, 0x5, 0x0, 0x3f, 0xe1, 0x5, 0x9}, &(0x7f0000000200)={0xd6e, 0xfa0, 0x9, 0x7, 0x4c, 0xffffffff00000001, 0x1, 0xc068}, &(0x7f0000000280)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) prctl$PR_GET_TSC(0x19, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000380)={0x3f, 0x516, 0x2, 0x7, 0x1000, 0x8, 0xfff, 0xffffffffffffffe1}, &(0x7f00000003c0)={0x5, 0xd4c, 0x6, 0xff, 0x8, 0x4, 0x1000, 0x8000}, &(0x7f0000000400)={0x8, 0x6, 0x2680000, 0x7, 0x338, 0x7f, 0x6, 0xffffffffffffffaf}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x3]}, 0x8}) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) futex(&(0x7f0000000540)=0x1, 0xb, 0x2, &(0x7f00000005c0)={r3, r4+10000000}, &(0x7f0000000600)=0x1, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000640)={0x3, 0x9, 0xffffffff, 0xce5b, 0x0, 0x7, 0x80000001, 0x8}, &(0x7f0000000680)={0x6, 0x2, 0x3, 0xfff, 0x5, 0x4, 0x100, 0x7ff}, &(0x7f00000006c0)={0x100000001, 0x401, 0x5, 0xb56, 0x8, 0x2, 0x80, 0x4}, &(0x7f0000000740)={r5, r6+10000000}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x401]}, 0x8}) pselect6(0x40, &(0x7f0000000800)={0x2, 0x8, 0xd37, 0x8, 0x7f, 0x4, 0x3ff8000, 0x68699eeb}, &(0x7f0000000840)={0x7, 0x8, 0x0, 0x9, 0x9, 0x40000, 0x7f, 0x1ae}, &(0x7f0000000880)={0x4305a51b, 0x1, 0x80000000, 0x1c00000000, 0xf5b, 0x7, 0x1, 0x8}, &(0x7f00000008c0)={0x0, 0x3938700}, &(0x7f0000000940)={&(0x7f0000000900)={[0x100000000]}, 0x8}) r7 = gettid() ioprio_get$pid(0x1, r7) clock_gettime(0x0, &(0x7f0000000980)) pselect6(0x40, &(0x7f00000009c0)={0xffffffffffff8001, 0x7fffffff, 0x1, 0x6, 0x5, 0xe8, 0x2, 0xffffffffffffff7f}, &(0x7f0000000a00)={0x15aa, 0x4, 0x3, 0xffffffff, 0xed, 0x7, 0xc0000, 0x2}, &(0x7f0000000a40)={0x6, 0x7, 0x80000000, 0x8, 0x5, 0x401, 0xfffffffffffff001, 0x3}, &(0x7f0000000a80)={0x77359400}, &(0x7f0000000b00)={&(0x7f0000000ac0), 0x8}) clock_gettime(0x0, &(0x7f0000000b40)) 03:42:32 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040)) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000080)={0xffffffff7fffffff, 0xffffffee}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0xc, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x2000c000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4280}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x24000004) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) r1 = syz_open_dev$rtc(&(0x7f00000002c0), 0x8000, 0x20240) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000380)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x25c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x23c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x100, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2260}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xee}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x88b}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7a2d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700), 0x80000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xcc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x85}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x74}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r3, &(0x7f0000000a80)=@ll={0x11, 0x0, 0x0}, &(0x7f0000000b00)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000d00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc0}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 03:42:32 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="7081217bd282"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x23c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc007}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x91}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7584}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x756}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xcf, 0x3, "870c0637f58b9ac68f61ee0c6fd2bf3c66228133141269c2ae86f23d877320fd67390334bd888950862aa9323d152a63e4b52d56043c290c7ef1aa8fc4c13abef12bf7df7476665e3681c35c442e67a55600069d44200935231cfd6e90c4841b611c25593f351192f72d9c42d18c934c81446d6a8b6df6eb47ded2e3f7c89010ed458b5f165c10aedbe3ebf2545fd63a54a3d28370b5c56d90f086b65345c2aa67790a3064ea3e5b3492c5f77ef07570e53a5c0c59597a3ee335a4be4c0de0cea7bab9cae63bbb389e897d"}, @TIPC_NLA_NODE_ID={0x36, 0x3, "7e01def49f8b2189ffafa9bf57a01b513899b80f9b52d03bea3a4a15eade6116ddd4d448fcdc73ba475361c9667987e4fa8e"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x840) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x52}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) socketpair(0x28, 0x800, 0x2, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40020}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000900)={'wlan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000a80)={'gre0\x00', &(0x7f0000000980)={'erspan0\x00', r0, 0x700, 0x0, 0xfb6, 0x7, {{0x2d, 0x4, 0x3, 0x1b, 0xb4, 0x68, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x1c, 0x8, 0x3, 0x8, [{@broadcast, 0x6}, {@rand_addr=0x64010102, 0x3}, {@broadcast, 0x3ff}]}, @timestamp_prespec={0x44, 0x3c, 0xff, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x7ff}, {@multicast2, 0x4}, {@empty, 0x31}, {@private=0xa010102, 0x6a7c}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x25d}, {@rand_addr=0x64010100, 0x79}, {@multicast1, 0x100}]}, @ssrr={0x89, 0x1f, 0xa5, [@dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x29}, @remote, @broadcast, @rand_addr=0x64010101]}, @cipso={0x86, 0x1e, 0x2, [{0x1, 0x9, "68a9c8496a476f"}, {0x0, 0xf, "bb8f0e55bbb18822c0ab2156af"}]}, @end, @ssrr={0x89, 0x7, 0xc9, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa4, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4080}, 0x0) gettid() sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5b63}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0xc0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x75}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008044}, 0x8000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24004080) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000f80)={0x2d4, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb1b6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8cb7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x25}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x920}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x82}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8a5a}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x167}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff18e7}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x3f, @empty}}}}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff00000000}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x76, 0x3, "59bd5488e7741253b04c9dc968cec4b4b9bcd51aba3f0f2d95bb7368740e11f3ebb68a72ca2b6bf9ebc5bf6e83ae8bc1f0bcae56cb42ea15f425366ab00aaf45044a47f1f8019bf3ae7c80cb0362eb5a4879fd58ed63b29bcfe82c222b4a205199513a36c7f38fbc339bc643e82c9e83a951"}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x52cd8e00}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @empty, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x40}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40f8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000080) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f0000001340)={0xec, r1, 0x20, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x268}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7e599296}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc7cd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7a7}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdaad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x11}, 0x8800) 03:42:32 executing program 4: socketpair(0x3c, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4041) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = accept(r0, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000001c0)=0x80) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc) r3 = socket(0x28, 0x6, 0x80000001) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000480)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r2) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x8, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8000041) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) r6 = accept(r2, &(0x7f00000006c0)=@phonet, &(0x7f0000000740)=0x80) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x15041}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00'}) socket(0x1f, 0x3, 0x0) r7 = fspick(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) getpeername(r2, &(0x7f0000000900)=@qipcrtr, &(0x7f0000000980)=0x80) mount$9p_fd(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80002, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@dfltuid}, {@version_u}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@aname={'aname', 0x3d, '!'}}, {@access_client}], [{@appraise}, {@dont_appraise}, {@measure}]}}) 03:42:32 executing program 5: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x4, 0x7, 0x58, 0x9, 0x1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x4, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x40, 0x7, 0x1, 0x1, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x66, 0x0, 0x3f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@cipso={0x86, 0x1a, 0x1, [{0x0, 0x7, "ae9745467a"}, {0x6, 0x8, "9b734a95d62f"}, {0x6, 0x5, "1c03eb"}]}]}}}}}) r3 = socket(0x2b, 0x2, 0xb06) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x6a2e, &(0x7f0000000240)={0x0, 0x49d1, 0x8, 0x0, 0x376}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xc000010, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000340)=0x1, 0x4) r6 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x4, 0x40, 0x9, 0xebde, 0x57, @local, @private1, 0x10, 0x8000, 0x10000, 0x3}}) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000440)=@gcm_256={{0x303}, "82c3b5d8d828df9d", "bc3a5c9368581c56183c0bfc22a359cf6b0b92f2a7b109a72f59b5588b207be8", "daf77a1e", "b6d0b148c5eb8963"}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xa110}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0461c46e6632"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x200048c1}, 0x20000000) 03:42:32 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:wireless_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r1, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:netcontrol_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hostname_exec_t:s0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000880)={&(0x7f0000000300), 0xc, &(0x7f0000000840)={&(0x7f0000000340)={0x4f4, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x1e8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ID={0x69, 0x3, "c18a3be267c43f7048235680f5ea8772b35d740c63aff19c3baf23958f8c6706c492e826424dd5721eae7dbf6e438806d1c0b49c4e01da4af62533a0507467c9a6704b3f422cedc6056c0d3b99298a4353086c38d091b40ca34563499e82e167aba3eeda07"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd8, 0x3, "7909fe3809aa1298a7510eb16c58e7203a9c815663218fa9f3acfb0594ad75b599a559d2a6812baf8557bb00253c242375c91a04407e4932bb4afe9aecd4aa1a6295c29682ff5d9bbdc06db02f9dea867bca1f8fa44db742f2c1213060a0b77e88a53d01b68ca7c09779c989cb135fbf6418ee70acc73c44fdf4173608818249e023e21fba7da05deacfe18a1c5e53a28c85a866794c91821a9b20c992738cdda964ab69d3f0787e819379376e91d3c80bb0f3d0f0e72c569f78744d4f33bf297672e1f2db1f558a491c214769191b900cdca78b"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "c4e292246ee170ce803abfbc1c8b54d5438fccb8e75e2893e3c5c72e29d04b600b2e40"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "2d06a6153b1968ae9810ec9bd3245f94c7c8bec9c91ca75bf07c35255c1c54"}}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @remote, 0x1acdef88}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x101, @remote, 0xbce}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10001, @local, 0x7f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2d48bf2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x67, 0x3, "345fed761d1b84c86719323193c318a730bf61122221c1b6a0432e65ced336edfeb013eeaf7497d8fef803f8af10cfb2c3a313df1770fe9030ee63e54c7bb92538c0f48fccc668c6e2887320dfc8506281f158b97302f38717457493f51fdcc1d93dcc"}, @TIPC_NLA_NODE_ID={0x93, 0x3, "c8076e039f36af3ae398af63f04a3e13940e53f4e849a8bc9fee04625152f0e785d2dc92e31427a6a487a08335d4c23acd075a74d2998983090b956fc01aa161d41421d77cf30b4897e4da1d66a6cf84f0cbc77ae83b14d5021abdba8d72ffe6e6f39fd141d06bbce5a1ff6cac64b6ef29047dbfb4641532b23f7aa0b746dfa9b54ae56d1bbef8f1b81bfe015c7414"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x622a5a7a}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x805}, 0xc081) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x9) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000009c0)) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000a00)=@ccm_128={{0x304}, "4fff8127a957da17", "e46c67775e4828ff4ab1347329f54bb7", "e0e3e98b", "95cfd208dfb9589d"}, 0x28) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x7c, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:file_context_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44401}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000c00)=0x1, 0x4) r4 = socket(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c40)={'batadv_slave_1\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20040047) 03:42:32 executing program 0: ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x2, @time={0x2, 0xea}, 0x5, {0xff, 0x9}, 0x1, 0x0, 0xfe}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="6be510a4b1b7d6f3ae47feb9b0928abf1ccccbe96907549d359215d5b558275dde3d7731ab7576eb82fbab7b5854ef8775166db08fd7397d8eab8675cf88c4d79110f10cd275d05127239393fa8ee5f7b7ef4b8aeddf132322d43f8866954725d0dd9d36c3c842833e7bf2862eaabb80be9ff48a45b5df13c6f5ed8e3d566254dea8a67bb9c469ddc6a949620efa5001df1c504134cfcacc38af9130fe4a1021793f1b48d1428ac099b03b5ea5490396d326dc486d377e35bd014582299191f48c67a41ae36e35392ada9130a466467b031c14428b83d755283378fdd4", 0xdd) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) getsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x130, 0x218, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000340), {[{{@arp={@local, @multicast1, 0xff000000, 0xff000000, 0x0, 0x5, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x9, 0x0, 0x2, 0xfffd, 0x7, 0x2, 'wg2\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x0, 0x12c}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x10, 0x0, 0x8000, 0x0, 0x0, "643965a46e8c29e0614c68b7b80708d1cfeff60c9b837a71795c94df7326e1c3c9444c7b0307e606a29a6be7847b1c91aea22a50fd1dc73b9a6e62d5f8b6673b"}}}, {{@arp={@multicast1, @multicast2, 0xffffffff, 0xffffff00, 0xd, 0x4, {@mac, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x1fe, 0x0, 0xff, 0xff]}}, 0x5, 0xa20e, 0x1, 0x5d8, 0x800, 0x7, 'batadv_slave_0\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x158}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfff}}}, {{@arp={@broadcast, @local, 0xff000000, 0xff000000, 0x9, 0x9, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@random="49569efb6feb", {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x14b, 0x401, 0x1, 0x6, 0x7, 0x0, 'macsec0\x00', 'bridge0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000007c0)="93557b98b087e78b7a92d768033a64de1d5820d58a83ca91e0120d21fedce23ac62693ff4fdc3a42e956ca2f477fd986daea0b177051ca0572aa1b3432e3c3dd37bd76ad74d5280905b37ea148e5cafa29ae175932fabbb0203912478fe8e2cb51146b5734b6ce5e64971bd70417ca9e978e6685acb6acd9a4c45b1c10b7d799b39c905d8f0f30d80dd208c89872c918a7eec954605a31ab3a7521ac589d99579b8a5d66c3cd59c8ebc9ff83d0a23b9af8053db11e324129d9f3c75b294dbfbfdd1d622c97f21023b9fc73167ed5495f3696ececd412", 0xd6) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000008c0)="1dbf8779164187f70a0dd9e5f3779726d58f942cf280c529c46bfd351224b7b8b0d8310365e08330c3650858139a3be2715a74", 0x33) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x101402) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r2, 0x824, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40010) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000a80)={{{@in6=@local, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000b80)=0xe8) getegid() sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x988c, 0x7e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000cc0)={0x1f, 0x9, @none, 0x5, 0x2}, 0xe) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 03:42:32 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socketpair(0x22, 0x1, 0xdb8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140), 0x4) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x6, 0xc000) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0xa49000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@afid={'afid', 0x3d, 0x80000001}}, {@cache_mmap}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/vcs\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@obj_user={'obj_user', 0x3d, '/dev/vcs\x00'}}, {@hash}]}}) r3 = fsmount(r0, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2049000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '%'}}, {@cache_fscache}], [{@fsname={'fsname', 0x3d, '^&*'}}, {@hash}, {@euid_lt={'euid<', r4}}, {@fsmagic={'fsmagic', 0x3d, 0xeaa}}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x90$@\\'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@fsname={'fsname', 0x3d, '/dev/vcs\x00'}}, {@subj_type={'subj_type', 0x3d, 'smackfshat'}}]}}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000600)=0x4, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040801}, 0x850) r6 = accept$inet(r3, 0x0, &(0x7f0000000780)) r7 = accept(r6, &(0x7f00000007c0)=@phonet, &(0x7f0000000840)=0x80) r8 = socket(0x3, 0x6, 0x3ff) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @mcast2, 0x4}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x11) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000802}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r9, 0xc30, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x35}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x234}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1f}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000830}, 0x4004044) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040840) fspick(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x0) 03:42:32 executing program 3: clock_gettime(0x6, &(0x7f0000000000)) clock_gettime(0x4, &(0x7f0000000040)) futex(&(0x7f0000000080), 0xd, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x2) setrlimit(0x9, &(0x7f0000000140)={0x1ff, 0x9}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0xfff, 0x2, 0x81, 0x44, 0x8, 0x5, 0x8, 0x9}, &(0x7f00000001c0)={0x9, 0x8, 0x5, 0x0, 0x3f, 0xe1, 0x5, 0x9}, &(0x7f0000000200)={0xd6e, 0xfa0, 0x9, 0x7, 0x4c, 0xffffffff00000001, 0x1, 0xc068}, &(0x7f0000000280)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) prctl$PR_GET_TSC(0x19, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000380)={0x3f, 0x516, 0x2, 0x7, 0x1000, 0x8, 0xfff, 0xffffffffffffffe1}, &(0x7f00000003c0)={0x5, 0xd4c, 0x6, 0xff, 0x8, 0x4, 0x1000, 0x8000}, &(0x7f0000000400)={0x8, 0x6, 0x2680000, 0x7, 0x338, 0x7f, 0x6, 0xffffffffffffffaf}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x3]}, 0x8}) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) futex(&(0x7f0000000540)=0x1, 0xb, 0x2, &(0x7f00000005c0)={r3, r4+10000000}, &(0x7f0000000600)=0x1, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000640)={0x3, 0x9, 0xffffffff, 0xce5b, 0x0, 0x7, 0x80000001, 0x8}, &(0x7f0000000680)={0x6, 0x2, 0x3, 0xfff, 0x5, 0x4, 0x100, 0x7ff}, &(0x7f00000006c0)={0x100000001, 0x401, 0x5, 0xb56, 0x8, 0x2, 0x80, 0x4}, &(0x7f0000000740)={r5, r6+10000000}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x401]}, 0x8}) pselect6(0x40, &(0x7f0000000800)={0x2, 0x8, 0xd37, 0x8, 0x7f, 0x4, 0x3ff8000, 0x68699eeb}, &(0x7f0000000840)={0x7, 0x8, 0x0, 0x9, 0x9, 0x40000, 0x7f, 0x1ae}, &(0x7f0000000880)={0x4305a51b, 0x1, 0x80000000, 0x1c00000000, 0xf5b, 0x7, 0x1, 0x8}, &(0x7f00000008c0)={0x0, 0x3938700}, &(0x7f0000000940)={&(0x7f0000000900)={[0x100000000]}, 0x8}) r7 = gettid() ioprio_get$pid(0x1, r7) clock_gettime(0x0, &(0x7f0000000980)) pselect6(0x40, &(0x7f00000009c0)={0xffffffffffff8001, 0x7fffffff, 0x1, 0x6, 0x5, 0xe8, 0x2, 0xffffffffffffff7f}, &(0x7f0000000a00)={0x15aa, 0x4, 0x3, 0xffffffff, 0xed, 0x7, 0xc0000, 0x2}, &(0x7f0000000a40)={0x6, 0x7, 0x80000000, 0x8, 0x5, 0x401, 0xfffffffffffff001, 0x3}, &(0x7f0000000a80)={0x77359400}, &(0x7f0000000b00)={&(0x7f0000000ac0), 0x8}) 03:42:32 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socketpair(0x22, 0x1, 0xdb8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140), 0x4) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x6, 0xc000) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0xa49000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@afid={'afid', 0x3d, 0x80000001}}, {@cache_mmap}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/vcs\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@obj_user={'obj_user', 0x3d, '/dev/vcs\x00'}}, {@hash}]}}) r3 = fsmount(r0, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2049000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '%'}}, {@cache_fscache}], [{@fsname={'fsname', 0x3d, '^&*'}}, {@hash}, {@euid_lt={'euid<', r4}}, {@fsmagic={'fsmagic', 0x3d, 0xeaa}}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x90$@\\'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@fsname={'fsname', 0x3d, '/dev/vcs\x00'}}, {@subj_type={'subj_type', 0x3d, 'smackfshat'}}]}}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000600)=0x4, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040801}, 0x850) r6 = accept$inet(r3, 0x0, &(0x7f0000000780)) r7 = accept(r6, &(0x7f00000007c0)=@phonet, &(0x7f0000000840)=0x80) r8 = socket(0x3, 0x6, 0x3ff) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @mcast2, 0x4}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x11) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000802}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r9, 0xc30, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x35}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x234}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1f}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000830}, 0x4004044) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040840) fspick(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x0) 03:42:32 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="7081217bd282"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x23c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc007}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x91}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7584}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x756}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xcf, 0x3, "870c0637f58b9ac68f61ee0c6fd2bf3c66228133141269c2ae86f23d877320fd67390334bd888950862aa9323d152a63e4b52d56043c290c7ef1aa8fc4c13abef12bf7df7476665e3681c35c442e67a55600069d44200935231cfd6e90c4841b611c25593f351192f72d9c42d18c934c81446d6a8b6df6eb47ded2e3f7c89010ed458b5f165c10aedbe3ebf2545fd63a54a3d28370b5c56d90f086b65345c2aa67790a3064ea3e5b3492c5f77ef07570e53a5c0c59597a3ee335a4be4c0de0cea7bab9cae63bbb389e897d"}, @TIPC_NLA_NODE_ID={0x36, 0x3, "7e01def49f8b2189ffafa9bf57a01b513899b80f9b52d03bea3a4a15eade6116ddd4d448fcdc73ba475361c9667987e4fa8e"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x840) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x52}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) socketpair(0x28, 0x800, 0x2, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40020}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000900)={'wlan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000a80)={'gre0\x00', &(0x7f0000000980)={'erspan0\x00', r0, 0x700, 0x0, 0xfb6, 0x7, {{0x2d, 0x4, 0x3, 0x1b, 0xb4, 0x68, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x1c, 0x8, 0x3, 0x8, [{@broadcast, 0x6}, {@rand_addr=0x64010102, 0x3}, {@broadcast, 0x3ff}]}, @timestamp_prespec={0x44, 0x3c, 0xff, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x7ff}, {@multicast2, 0x4}, {@empty, 0x31}, {@private=0xa010102, 0x6a7c}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x25d}, {@rand_addr=0x64010100, 0x79}, {@multicast1, 0x100}]}, @ssrr={0x89, 0x1f, 0xa5, [@dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x29}, @remote, @broadcast, @rand_addr=0x64010101]}, @cipso={0x86, 0x1e, 0x2, [{0x1, 0x9, "68a9c8496a476f"}, {0x0, 0xf, "bb8f0e55bbb18822c0ab2156af"}]}, @end, @ssrr={0x89, 0x7, 0xc9, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa4, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4080}, 0x0) gettid() sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5b63}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0xc0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x75}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008044}, 0x8000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24004080) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000f80)={0x2d4, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb1b6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8cb7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x25}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x920}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x82}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8a5a}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x167}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff18e7}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x3f, @empty}}}}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff00000000}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x76, 0x3, "59bd5488e7741253b04c9dc968cec4b4b9bcd51aba3f0f2d95bb7368740e11f3ebb68a72ca2b6bf9ebc5bf6e83ae8bc1f0bcae56cb42ea15f425366ab00aaf45044a47f1f8019bf3ae7c80cb0362eb5a4879fd58ed63b29bcfe82c222b4a205199513a36c7f38fbc339bc643e82c9e83a951"}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x52cd8e00}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @empty, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x40}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40f8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000080) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f0000001340)={0xec, r1, 0x20, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x268}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7e599296}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc7cd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7a7}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdaad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x11}, 0x8800) 03:42:32 executing program 5: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x4, 0x7, 0x58, 0x9, 0x1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x4, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x40, 0x7, 0x1, 0x1, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x66, 0x0, 0x3f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@cipso={0x86, 0x1a, 0x1, [{0x0, 0x7, "ae9745467a"}, {0x6, 0x8, "9b734a95d62f"}, {0x6, 0x5, "1c03eb"}]}]}}}}}) r3 = socket(0x2b, 0x2, 0xb06) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x6a2e, &(0x7f0000000240)={0x0, 0x49d1, 0x8, 0x0, 0x376}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xc000010, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000340)=0x1, 0x4) r6 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x4, 0x40, 0x9, 0xebde, 0x57, @local, @private1, 0x10, 0x8000, 0x10000, 0x3}}) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000440)=@gcm_256={{0x303}, "82c3b5d8d828df9d", "bc3a5c9368581c56183c0bfc22a359cf6b0b92f2a7b109a72f59b5588b207be8", "daf77a1e", "b6d0b148c5eb8963"}, 0x38) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xa110}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0461c46e6632"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x200048c1}, 0x20000000) [ 123.432057] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.432800] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.433597] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.436652] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.437261] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 123.437904] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 123.438720] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 123.439317] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 124.629573] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.461942] Bluetooth: hci7: command 0x0c1a tx timeout [ 125.463265] Bluetooth: hci6: command 0x0c1a tx timeout [ 125.463499] Bluetooth: hci5: command 0x0c1a tx timeout [ 125.464240] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.464619] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.464637] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.464651] Bluetooth: hci1: command 0x0c1a tx timeout 03:42:41 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socketpair(0x22, 0x1, 0xdb8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140), 0x4) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x6, 0xc000) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0xa49000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@afid={'afid', 0x3d, 0x80000001}}, {@cache_mmap}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/vcs\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@obj_user={'obj_user', 0x3d, '/dev/vcs\x00'}}, {@hash}]}}) r3 = fsmount(r0, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2049000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '%'}}, {@cache_fscache}], [{@fsname={'fsname', 0x3d, '^&*'}}, {@hash}, {@euid_lt={'euid<', r4}}, {@fsmagic={'fsmagic', 0x3d, 0xeaa}}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x90$@\\'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@fsname={'fsname', 0x3d, '/dev/vcs\x00'}}, {@subj_type={'subj_type', 0x3d, 'smackfshat'}}]}}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000600)=0x4, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040801}, 0x850) r6 = accept$inet(r3, 0x0, &(0x7f0000000780)) accept(r6, &(0x7f00000007c0)=@phonet, &(0x7f0000000840)=0x80) r7 = socket(0x3, 0x6, 0x3ff) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @mcast2, 0x4}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x11) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000802}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r8, 0xc30, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x35}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x234}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1f}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000830}, 0x4004044) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00'}) fspick(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x0) 03:42:41 executing program 0: ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x2, @time={0x2, 0xea}, 0x5, {0xff, 0x9}, 0x1, 0x0, 0xfe}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="6be510a4b1b7d6f3ae47feb9b0928abf1ccccbe96907549d359215d5b558275dde3d7731ab7576eb82fbab7b5854ef8775166db08fd7397d8eab8675cf88c4d79110f10cd275d05127239393fa8ee5f7b7ef4b8aeddf132322d43f8866954725d0dd9d36c3c842833e7bf2862eaabb80be9ff48a45b5df13c6f5ed8e3d566254dea8a67bb9c469ddc6a949620efa5001df1c504134cfcacc38af9130fe4a1021793f1b48d1428ac099b03b5ea5490396d326dc486d377e35bd014582299191f48c67a41ae36e35392ada9130a466467b031c14428b83d755283378fdd4", 0xdd) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) getsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x130, 0x218, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000340), {[{{@arp={@local, @multicast1, 0xff000000, 0xff000000, 0x0, 0x5, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x9, 0x0, 0x2, 0xfffd, 0x7, 0x2, 'wg2\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x0, 0x12c}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x10, 0x0, 0x8000, 0x0, 0x0, "643965a46e8c29e0614c68b7b80708d1cfeff60c9b837a71795c94df7326e1c3c9444c7b0307e606a29a6be7847b1c91aea22a50fd1dc73b9a6e62d5f8b6673b"}}}, {{@arp={@multicast1, @multicast2, 0xffffffff, 0xffffff00, 0xd, 0x4, {@mac, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x1fe, 0x0, 0xff, 0xff]}}, 0x5, 0xa20e, 0x1, 0x5d8, 0x800, 0x7, 'batadv_slave_0\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x158}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfff}}}, {{@arp={@broadcast, @local, 0xff000000, 0xff000000, 0x9, 0x9, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@random="49569efb6feb", {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x14b, 0x401, 0x1, 0x6, 0x7, 0x0, 'macsec0\x00', 'bridge0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000007c0)="93557b98b087e78b7a92d768033a64de1d5820d58a83ca91e0120d21fedce23ac62693ff4fdc3a42e956ca2f477fd986daea0b177051ca0572aa1b3432e3c3dd37bd76ad74d5280905b37ea148e5cafa29ae175932fabbb0203912478fe8e2cb51146b5734b6ce5e64971bd70417ca9e978e6685acb6acd9a4c45b1c10b7d799b39c905d8f0f30d80dd208c89872c918a7eec954605a31ab3a7521ac589d99579b8a5d66c3cd59c8ebc9ff83d0a23b9af8053db11e324129d9f3c75b294dbfbfdd1d622c97f21023b9fc73167ed5495f3696ececd412", 0xd6) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000008c0)="1dbf8779164187f70a0dd9e5f3779726d58f942cf280c529c46bfd351224b7b8b0d8310365e08330c3650858139a3be2715a74", 0x33) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x101402) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r2, 0x824, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40010) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000a80)={{{@in6=@local, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000b80)=0xe8) getegid() sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x988c, 0x7e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000cc0)={0x1f, 0x9, @none, 0x5, 0x2}, 0xe) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 03:42:41 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="7081217bd282"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x23c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc007}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x91}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7584}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x756}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xcf, 0x3, "870c0637f58b9ac68f61ee0c6fd2bf3c66228133141269c2ae86f23d877320fd67390334bd888950862aa9323d152a63e4b52d56043c290c7ef1aa8fc4c13abef12bf7df7476665e3681c35c442e67a55600069d44200935231cfd6e90c4841b611c25593f351192f72d9c42d18c934c81446d6a8b6df6eb47ded2e3f7c89010ed458b5f165c10aedbe3ebf2545fd63a54a3d28370b5c56d90f086b65345c2aa67790a3064ea3e5b3492c5f77ef07570e53a5c0c59597a3ee335a4be4c0de0cea7bab9cae63bbb389e897d"}, @TIPC_NLA_NODE_ID={0x36, 0x3, "7e01def49f8b2189ffafa9bf57a01b513899b80f9b52d03bea3a4a15eade6116ddd4d448fcdc73ba475361c9667987e4fa8e"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x840) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x52}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) socketpair(0x28, 0x800, 0x2, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40020}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000900)={'wlan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000a80)={'gre0\x00', &(0x7f0000000980)={'erspan0\x00', r0, 0x700, 0x0, 0xfb6, 0x7, {{0x2d, 0x4, 0x3, 0x1b, 0xb4, 0x68, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x1c, 0x8, 0x3, 0x8, [{@broadcast, 0x6}, {@rand_addr=0x64010102, 0x3}, {@broadcast, 0x3ff}]}, @timestamp_prespec={0x44, 0x3c, 0xff, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x7ff}, {@multicast2, 0x4}, {@empty, 0x31}, {@private=0xa010102, 0x6a7c}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x25d}, {@rand_addr=0x64010100, 0x79}, {@multicast1, 0x100}]}, @ssrr={0x89, 0x1f, 0xa5, [@dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x29}, @remote, @broadcast, @rand_addr=0x64010101]}, @cipso={0x86, 0x1e, 0x2, [{0x1, 0x9, "68a9c8496a476f"}, {0x0, 0xf, "bb8f0e55bbb18822c0ab2156af"}]}, @end, @ssrr={0x89, 0x7, 0xc9, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa4, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4080}, 0x0) gettid() sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5b63}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0xc0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x75}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008044}, 0x8000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24004080) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f0000000f80)={0x2d4, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb1b6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8cb7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x25}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0xa0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x920}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x82}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8a5a}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x167}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff18e7}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x3f, @empty}}}}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff00000000}]}, @TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x76, 0x3, "59bd5488e7741253b04c9dc968cec4b4b9bcd51aba3f0f2d95bb7368740e11f3ebb68a72ca2b6bf9ebc5bf6e83ae8bc1f0bcae56cb42ea15f425366ab00aaf45044a47f1f8019bf3ae7c80cb0362eb5a4879fd58ed63b29bcfe82c222b4a205199513a36c7f38fbc339bc643e82c9e83a951"}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x52cd8e00}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @empty, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x40}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40f8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20040001}, 0x4000080) 03:42:41 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040)) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000080)={0xffffffff7fffffff, 0xffffffee}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0xc, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x2000c000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4280}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x24000004) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) r1 = syz_open_dev$rtc(&(0x7f00000002c0), 0x8000, 0x20240) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000380)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x25c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x23c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x100, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2260}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xee}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x88b}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7a2d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700), 0x80000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xcc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x85}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x74}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r3, &(0x7f0000000a80)=@ll={0x11, 0x0, 0x0}, &(0x7f0000000b00)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000d00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc0}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 03:42:41 executing program 4: socketpair(0x3c, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4041) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = accept(r0, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000001c0)=0x80) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc) r3 = socket(0x28, 0x6, 0x80000001) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000480)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r2) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x8, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8000041) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) r6 = accept(r2, &(0x7f00000006c0)=@phonet, &(0x7f0000000740)=0x80) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x15041}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00'}) socket(0x1f, 0x3, 0x0) r7 = fspick(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) getpeername(r2, &(0x7f0000000900)=@qipcrtr, &(0x7f0000000980)=0x80) 03:42:41 executing program 5: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x4, 0x7, 0x58, 0x9, 0x1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x4, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x40, 0x7, 0x1, 0x1, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x66, 0x0, 0x3f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@cipso={0x86, 0x1a, 0x1, [{0x0, 0x7, "ae9745467a"}, {0x6, 0x8, "9b734a95d62f"}, {0x6, 0x5, "1c03eb"}]}]}}}}}) r3 = socket(0x2b, 0x2, 0xb06) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x6a2e, &(0x7f0000000240)={0x0, 0x49d1, 0x8, 0x0, 0x376}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xc000010, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000340)=0x1, 0x4) r6 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', r1, 0x4, 0x40, 0x9, 0xebde, 0x57, @local, @private1, 0x10, 0x8000, 0x10000, 0x3}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xa110}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0461c46e6632"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x200048c1}, 0x20000000) 03:42:41 executing program 3: clock_gettime(0x6, &(0x7f0000000000)) clock_gettime(0x4, &(0x7f0000000040)) futex(&(0x7f0000000080), 0xd, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x2) setrlimit(0x9, &(0x7f0000000140)={0x1ff, 0x9}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0xfff, 0x2, 0x81, 0x44, 0x8, 0x5, 0x8, 0x9}, &(0x7f00000001c0)={0x9, 0x8, 0x5, 0x0, 0x3f, 0xe1, 0x5, 0x9}, &(0x7f0000000200)={0xd6e, 0xfa0, 0x9, 0x7, 0x4c, 0xffffffff00000001, 0x1, 0xc068}, &(0x7f0000000280)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) prctl$PR_GET_TSC(0x19, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000380)={0x3f, 0x516, 0x2, 0x7, 0x1000, 0x8, 0xfff, 0xffffffffffffffe1}, &(0x7f00000003c0)={0x5, 0xd4c, 0x6, 0xff, 0x8, 0x4, 0x1000, 0x8000}, &(0x7f0000000400)={0x8, 0x6, 0x2680000, 0x7, 0x338, 0x7f, 0x6, 0xffffffffffffffaf}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x3]}, 0x8}) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) futex(&(0x7f0000000540)=0x1, 0xb, 0x2, &(0x7f00000005c0)={r3, r4+10000000}, &(0x7f0000000600)=0x1, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000640)={0x3, 0x9, 0xffffffff, 0xce5b, 0x0, 0x7, 0x80000001, 0x8}, &(0x7f0000000680)={0x6, 0x2, 0x3, 0xfff, 0x5, 0x4, 0x100, 0x7ff}, &(0x7f00000006c0)={0x100000001, 0x401, 0x5, 0xb56, 0x8, 0x2, 0x80, 0x4}, &(0x7f0000000740)={r5, r6+10000000}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x401]}, 0x8}) pselect6(0x40, &(0x7f0000000800)={0x2, 0x8, 0xd37, 0x8, 0x7f, 0x4, 0x3ff8000, 0x68699eeb}, &(0x7f0000000840)={0x7, 0x8, 0x0, 0x9, 0x9, 0x40000, 0x7f, 0x1ae}, &(0x7f0000000880)={0x4305a51b, 0x1, 0x80000000, 0x1c00000000, 0xf5b, 0x7, 0x1, 0x8}, &(0x7f00000008c0)={0x0, 0x3938700}, &(0x7f0000000940)={&(0x7f0000000900)={[0x100000000]}, 0x8}) r7 = gettid() ioprio_get$pid(0x1, r7) pselect6(0x40, &(0x7f00000009c0)={0xffffffffffff8001, 0x7fffffff, 0x1, 0x6, 0x5, 0xe8, 0x2, 0xffffffffffffff7f}, &(0x7f0000000a00)={0x15aa, 0x4, 0x3, 0xffffffff, 0xed, 0x7, 0xc0000, 0x2}, &(0x7f0000000a40)={0x6, 0x7, 0x80000000, 0x8, 0x5, 0x401, 0xfffffffffffff001, 0x3}, &(0x7f0000000a80)={0x77359400}, &(0x7f0000000b00)={&(0x7f0000000ac0), 0x8}) 03:42:41 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:wireless_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r1, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:netcontrol_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hostname_exec_t:s0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000880)={&(0x7f0000000300), 0xc, &(0x7f0000000840)={&(0x7f0000000340)={0x4f4, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x1e8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ID={0x69, 0x3, "c18a3be267c43f7048235680f5ea8772b35d740c63aff19c3baf23958f8c6706c492e826424dd5721eae7dbf6e438806d1c0b49c4e01da4af62533a0507467c9a6704b3f422cedc6056c0d3b99298a4353086c38d091b40ca34563499e82e167aba3eeda07"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd8, 0x3, "7909fe3809aa1298a7510eb16c58e7203a9c815663218fa9f3acfb0594ad75b599a559d2a6812baf8557bb00253c242375c91a04407e4932bb4afe9aecd4aa1a6295c29682ff5d9bbdc06db02f9dea867bca1f8fa44db742f2c1213060a0b77e88a53d01b68ca7c09779c989cb135fbf6418ee70acc73c44fdf4173608818249e023e21fba7da05deacfe18a1c5e53a28c85a866794c91821a9b20c992738cdda964ab69d3f0787e819379376e91d3c80bb0f3d0f0e72c569f78744d4f33bf297672e1f2db1f558a491c214769191b900cdca78b"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "c4e292246ee170ce803abfbc1c8b54d5438fccb8e75e2893e3c5c72e29d04b600b2e40"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "2d06a6153b1968ae9810ec9bd3245f94c7c8bec9c91ca75bf07c35255c1c54"}}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @remote, 0x1acdef88}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x101, @remote, 0xbce}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10001, @local, 0x7f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2d48bf2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x67, 0x3, "345fed761d1b84c86719323193c318a730bf61122221c1b6a0432e65ced336edfeb013eeaf7497d8fef803f8af10cfb2c3a313df1770fe9030ee63e54c7bb92538c0f48fccc668c6e2887320dfc8506281f158b97302f38717457493f51fdcc1d93dcc"}, @TIPC_NLA_NODE_ID={0x93, 0x3, "c8076e039f36af3ae398af63f04a3e13940e53f4e849a8bc9fee04625152f0e785d2dc92e31427a6a487a08335d4c23acd075a74d2998983090b956fc01aa161d41421d77cf30b4897e4da1d66a6cf84f0cbc77ae83b14d5021abdba8d72ffe6e6f39fd141d06bbce5a1ff6cac64b6ef29047dbfb4641532b23f7aa0b746dfa9b54ae56d1bbef8f1b81bfe015c7414"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x622a5a7a}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x805}, 0xc081) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x9) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000009c0)) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000a00)=@ccm_128={{0x304}, "4fff8127a957da17", "e46c67775e4828ff4ab1347329f54bb7", "e0e3e98b", "95cfd208dfb9589d"}, 0x28) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x7c, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:file_context_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44401}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000c00)=0x1, 0x4) r4 = socket(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c40)={'batadv_slave_1\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20040047) 03:42:41 executing program 3: clock_gettime(0x6, &(0x7f0000000000)) clock_gettime(0x4, &(0x7f0000000040)) futex(&(0x7f0000000080), 0xd, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x2) setrlimit(0x9, &(0x7f0000000140)={0x1ff, 0x9}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0xfff, 0x2, 0x81, 0x44, 0x8, 0x5, 0x8, 0x9}, &(0x7f00000001c0)={0x9, 0x8, 0x5, 0x0, 0x3f, 0xe1, 0x5, 0x9}, &(0x7f0000000200)={0xd6e, 0xfa0, 0x9, 0x7, 0x4c, 0xffffffff00000001, 0x1, 0xc068}, &(0x7f0000000280)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) prctl$PR_GET_TSC(0x19, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000380)={0x3f, 0x516, 0x2, 0x7, 0x1000, 0x8, 0xfff, 0xffffffffffffffe1}, &(0x7f00000003c0)={0x5, 0xd4c, 0x6, 0xff, 0x8, 0x4, 0x1000, 0x8000}, &(0x7f0000000400)={0x8, 0x6, 0x2680000, 0x7, 0x338, 0x7f, 0x6, 0xffffffffffffffaf}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x3]}, 0x8}) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) futex(&(0x7f0000000540)=0x1, 0xb, 0x2, &(0x7f00000005c0)={r3, r4+10000000}, &(0x7f0000000600)=0x1, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000640)={0x3, 0x9, 0xffffffff, 0xce5b, 0x0, 0x7, 0x80000001, 0x8}, &(0x7f0000000680)={0x6, 0x2, 0x3, 0xfff, 0x5, 0x4, 0x100, 0x7ff}, &(0x7f00000006c0)={0x100000001, 0x401, 0x5, 0xb56, 0x8, 0x2, 0x80, 0x4}, &(0x7f0000000740)={r5, r6+10000000}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x401]}, 0x8}) pselect6(0x40, &(0x7f0000000800)={0x2, 0x8, 0xd37, 0x8, 0x7f, 0x4, 0x3ff8000, 0x68699eeb}, &(0x7f0000000840)={0x7, 0x8, 0x0, 0x9, 0x9, 0x40000, 0x7f, 0x1ae}, &(0x7f0000000880)={0x4305a51b, 0x1, 0x80000000, 0x1c00000000, 0xf5b, 0x7, 0x1, 0x8}, &(0x7f00000008c0)={0x0, 0x3938700}, &(0x7f0000000940)={&(0x7f0000000900)={[0x100000000]}, 0x8}) gettid() pselect6(0x40, &(0x7f00000009c0)={0xffffffffffff8001, 0x7fffffff, 0x1, 0x6, 0x5, 0xe8, 0x2, 0xffffffffffffff7f}, &(0x7f0000000a00)={0x15aa, 0x4, 0x3, 0xffffffff, 0xed, 0x7, 0xc0000, 0x2}, &(0x7f0000000a40)={0x6, 0x7, 0x80000000, 0x8, 0x5, 0x401, 0xfffffffffffff001, 0x3}, &(0x7f0000000a80)={0x77359400}, &(0x7f0000000b00)={&(0x7f0000000ac0), 0x8}) 03:42:41 executing program 5: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x4, 0x7, 0x58, 0x9, 0x1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x4, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x40, 0x7, 0x1, 0x1, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x66, 0x0, 0x3f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@cipso={0x86, 0x1a, 0x1, [{0x0, 0x7, "ae9745467a"}, {0x6, 0x8, "9b734a95d62f"}, {0x6, 0x5, "1c03eb"}]}]}}}}}) r3 = socket(0x2b, 0x2, 0xb06) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x6a2e, &(0x7f0000000240)={0x0, 0x49d1, 0x8, 0x0, 0x376}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xc000010, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000340)=0x1, 0x4) fsmount(0xffffffffffffffff, 0x0, 0x4) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xa110}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0461c46e6632"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x200048c1}, 0x20000000) 03:42:41 executing program 0: ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x2, @time={0x2, 0xea}, 0x5, {0xff, 0x9}, 0x1, 0x0, 0xfe}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="6be510a4b1b7d6f3ae47feb9b0928abf1ccccbe96907549d359215d5b558275dde3d7731ab7576eb82fbab7b5854ef8775166db08fd7397d8eab8675cf88c4d79110f10cd275d05127239393fa8ee5f7b7ef4b8aeddf132322d43f8866954725d0dd9d36c3c842833e7bf2862eaabb80be9ff48a45b5df13c6f5ed8e3d566254dea8a67bb9c469ddc6a949620efa5001df1c504134cfcacc38af9130fe4a1021793f1b48d1428ac099b03b5ea5490396d326dc486d377e35bd014582299191f48c67a41ae36e35392ada9130a466467b031c14428b83d755283378fdd4", 0xdd) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) getsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x130, 0x218, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000340), {[{{@arp={@local, @multicast1, 0xff000000, 0xff000000, 0x0, 0x5, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x9, 0x0, 0x2, 0xfffd, 0x7, 0x2, 'wg2\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x0, 0x12c}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x10, 0x0, 0x8000, 0x0, 0x0, "643965a46e8c29e0614c68b7b80708d1cfeff60c9b837a71795c94df7326e1c3c9444c7b0307e606a29a6be7847b1c91aea22a50fd1dc73b9a6e62d5f8b6673b"}}}, {{@arp={@multicast1, @multicast2, 0xffffffff, 0xffffff00, 0xd, 0x4, {@mac, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x1fe, 0x0, 0xff, 0xff]}}, 0x5, 0xa20e, 0x1, 0x5d8, 0x800, 0x7, 'batadv_slave_0\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x158}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfff}}}, {{@arp={@broadcast, @local, 0xff000000, 0xff000000, 0x9, 0x9, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@random="49569efb6feb", {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x14b, 0x401, 0x1, 0x6, 0x7, 0x0, 'macsec0\x00', 'bridge0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000007c0)="93557b98b087e78b7a92d768033a64de1d5820d58a83ca91e0120d21fedce23ac62693ff4fdc3a42e956ca2f477fd986daea0b177051ca0572aa1b3432e3c3dd37bd76ad74d5280905b37ea148e5cafa29ae175932fabbb0203912478fe8e2cb51146b5734b6ce5e64971bd70417ca9e978e6685acb6acd9a4c45b1c10b7d799b39c905d8f0f30d80dd208c89872c918a7eec954605a31ab3a7521ac589d99579b8a5d66c3cd59c8ebc9ff83d0a23b9af8053db11e324129d9f3c75b294dbfbfdd1d622c97f21023b9fc73167ed5495f3696ececd412", 0xd6) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000008c0)="1dbf8779164187f70a0dd9e5f3779726d58f942cf280c529c46bfd351224b7b8b0d8310365e08330c3650858139a3be2715a74", 0x33) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x101402) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r2, 0x824, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40010) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000a80)={{{@in6=@local, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000b80)=0xe8) getegid() sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x988c, 0x7e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000cc0)={0x1f, 0x9, @none, 0x5, 0x2}, 0xe) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) 03:42:41 executing program 4: socketpair(0x3c, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4041) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = accept(r0, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000001c0)=0x80) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc) r3 = socket(0x28, 0x6, 0x80000001) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000480)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r2) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x8, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8000041) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) r6 = accept(r2, &(0x7f00000006c0)=@phonet, &(0x7f0000000740)=0x80) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x15041}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00'}) socket(0x1f, 0x3, 0x0) fspick(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x1) getpeername(r2, &(0x7f0000000900)=@qipcrtr, &(0x7f0000000980)=0x80) [ 132.288325] [ 132.288672] ===================================== [ 132.289376] WARNING: bad unlock balance detected! [ 132.290065] 6.19.0-rc5-next-20260114 #1 Not tainted [ 132.290755] ------------------------------------- [ 132.291431] syz-executor.0/4191 is trying to release lock (rcu_read_lock) at: [ 132.296297] [] __wait_on_freeing_inode+0x105/0x350 [ 132.297227] but there are no more locks to release! [ 132.297925] [ 132.297925] other info that might help us debug this: [ 132.298840] 4 locks held by syz-executor.0/4191: [ 132.299500] #0: ffff88800f4b63f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 132.300732] #1: ffff88801bf80d68 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 132.302134] #2: ffff88800f8da950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 132.303391] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 132.304686] [ 132.304686] stack backtrace: [ 132.305324] CPU: 1 UID: 0 PID: 4191 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 132.305350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 132.305361] Call Trace: [ 132.305368] [ 132.305376] dump_stack_lvl+0xca/0x120 [ 132.305418] ? __wait_on_freeing_inode+0x105/0x350 [ 132.305444] print_unlock_imbalance_bug+0x118/0x130 [ 132.305471] ? __wait_on_freeing_inode+0x105/0x350 [ 132.305497] lock_release+0x1ee/0x270 [ 132.305523] __wait_on_freeing_inode+0x10a/0x350 [ 132.305550] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 132.305579] ? __pfx_var_wake_function+0x10/0x10 [ 132.305610] ? lock_is_held_type+0x9e/0x120 [ 132.305644] insert_inode_locked+0x25f/0x890 [ 132.305675] __ext4_new_inode+0x223d/0x4cd0 [ 132.305706] ? __pfx___ext4_new_inode+0x10/0x10 [ 132.305732] ? __pfx___dquot_initialize+0x10/0x10 [ 132.305764] ? __pfx_avc_has_perm+0x10/0x10 [ 132.305792] ext4_symlink+0x623/0xb40 [ 132.305825] ? __pfx_ext4_symlink+0x10/0x10 [ 132.305854] ? security_inode_permission+0x72/0xe0 [ 132.305878] vfs_symlink+0x44b/0x840 [ 132.305908] do_symlinkat+0x153/0x440 [ 132.305933] ? __pfx_do_symlinkat+0x10/0x10 [ 132.305957] ? strncpy_from_user+0x21b/0x2f0 [ 132.305987] __x64_sys_symlink+0x79/0xa0 [ 132.306011] do_syscall_64+0xbf/0x420 [ 132.306033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.306055] RIP: 0033:0x7f1e04e9e427 [ 132.306071] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.306091] RSP: 002b:00007ffc94726cd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 132.306111] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1e04e9e427 [ 132.306124] RDX: ffffffffffffffbc RSI: 00007f1e04ef900e RDI: 00007f1e04ef81dd [ 132.306138] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc94726750 [ 132.306150] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 132.306163] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc94726da0 [ 132.306182] [ 132.333337] ------------[ cut here ]------------ [ 132.334080] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.0/4191 [ 132.335653] Modules linked in: [ 132.336169] CPU: 1 UID: 0 PID: 4191 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 132.337624] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 132.338848] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 132.339755] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 16 c0 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 24 74 03 e8 bc 5c 56 00 e9 [ 132.342344] RSP: 0018:ffff88804499f9a0 EFLAGS: 00010286 [ 132.343177] RAX: 00000000ffffffff RBX: ffff8880149fb700 RCX: ffffffff81565a27 [ 132.344255] RDX: 0000000000000000 RSI: ffffffff81565a30 RDI: ffff8880149fbafc [ 132.345330] RBP: ffff8880149fb700 R08: 0000000000000000 R09: fffffbfff0ba6ffc [ 132.346398] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880149fb700 [ 132.347538] R13: 0000000000000001 R14: ffffffff85c0db00 R15: ffff88802da73c48 [ 132.348605] FS: 000055555d50b400(0000) GS:ffff8880e5443000(0000) knlGS:0000000000000000 [ 132.349804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.350700] CR2: 000000c005e30000 CR3: 000000004c28d000 CR4: 0000000000350ef0 [ 132.351780] Call Trace: [ 132.352212] [ 132.353456] __wait_on_freeing_inode+0x10f/0x350 [ 132.354803] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 132.356804] ? __pfx_var_wake_function+0x10/0x10 [ 132.359071] ? lock_is_held_type+0x9e/0x120 [ 132.361114] insert_inode_locked+0x25f/0x890 [ 132.364125] __ext4_new_inode+0x223d/0x4cd0 [ 132.368712] ? __pfx___ext4_new_inode+0x10/0x10 [ 132.370947] ? __pfx___dquot_initialize+0x10/0x10 [ 132.372302] ? __pfx_avc_has_perm+0x10/0x10 [ 132.375604] ext4_symlink+0x623/0xb40 [ 132.379709] ? __pfx_ext4_symlink+0x10/0x10 [ 132.381562] ? security_inode_permission+0x72/0xe0 [ 132.388149] vfs_symlink+0x44b/0x840 [ 132.390767] do_symlinkat+0x153/0x440 [ 132.392772] ? __pfx_do_symlinkat+0x10/0x10 [ 132.394061] ? strncpy_from_user+0x21b/0x2f0 [ 132.397598] __x64_sys_symlink+0x79/0xa0 [ 132.398894] do_syscall_64+0xbf/0x420 [ 132.400313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.401258] RIP: 0033:0x7f1e04e9e427 [ 132.401972] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 132.404535] RSP: 002b:00007ffc94726cd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 132.405663] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1e04e9e427 [ 132.406715] RDX: ffffffffffffffbc RSI: 00007f1e04ef900e RDI: 00007f1e04ef81dd [ 132.407768] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc94726750 [ 132.408807] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 132.409858] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc94726da0 [ 132.414572] [ 132.414905] irq event stamp: 1445 [ 132.415372] hardirqs last enabled at (1445): [] irqentry_exit+0x17b/0x650 [ 132.416798] hardirqs last disabled at (1444): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 132.418292] softirqs last enabled at (1438): [] kernel_fpu_end+0x59/0x70 [ 132.419612] softirqs last disabled at (1436): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 132.421029] ---[ end trace 0000000000000000 ]--- 03:42:41 executing program 3: clock_gettime(0x6, &(0x7f0000000000)) clock_gettime(0x4, &(0x7f0000000040)) futex(&(0x7f0000000080), 0xd, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x2) setrlimit(0x9, &(0x7f0000000140)={0x1ff, 0x9}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0xfff, 0x2, 0x81, 0x44, 0x8, 0x5, 0x8, 0x9}, &(0x7f00000001c0)={0x9, 0x8, 0x5, 0x0, 0x3f, 0xe1, 0x5, 0x9}, &(0x7f0000000200)={0xd6e, 0xfa0, 0x9, 0x7, 0x4c, 0xffffffff00000001, 0x1, 0xc068}, &(0x7f0000000280)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) prctl$PR_GET_TSC(0x19, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000380)={0x3f, 0x516, 0x2, 0x7, 0x1000, 0x8, 0xfff, 0xffffffffffffffe1}, &(0x7f00000003c0)={0x5, 0xd4c, 0x6, 0xff, 0x8, 0x4, 0x1000, 0x8000}, &(0x7f0000000400)={0x8, 0x6, 0x2680000, 0x7, 0x338, 0x7f, 0x6, 0xffffffffffffffaf}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x3]}, 0x8}) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) futex(&(0x7f0000000540)=0x1, 0xb, 0x2, &(0x7f00000005c0)={r3, r4+10000000}, &(0x7f0000000600)=0x1, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000640)={0x3, 0x9, 0xffffffff, 0xce5b, 0x0, 0x7, 0x80000001, 0x8}, &(0x7f0000000680)={0x6, 0x2, 0x3, 0xfff, 0x5, 0x4, 0x100, 0x7ff}, &(0x7f00000006c0)={0x100000001, 0x401, 0x5, 0xb56, 0x8, 0x2, 0x80, 0x4}, &(0x7f0000000740)={r5, r6+10000000}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x401]}, 0x8}) pselect6(0x40, &(0x7f0000000800)={0x2, 0x8, 0xd37, 0x8, 0x7f, 0x4, 0x3ff8000, 0x68699eeb}, &(0x7f0000000840)={0x7, 0x8, 0x0, 0x9, 0x9, 0x40000, 0x7f, 0x1ae}, &(0x7f0000000880)={0x4305a51b, 0x1, 0x80000000, 0x1c00000000, 0xf5b, 0x7, 0x1, 0x8}, &(0x7f00000008c0)={0x0, 0x3938700}, &(0x7f0000000940)={&(0x7f0000000900)={[0x100000000]}, 0x8}) pselect6(0x40, &(0x7f00000009c0)={0xffffffffffff8001, 0x7fffffff, 0x1, 0x6, 0x5, 0xe8, 0x2, 0xffffffffffffff7f}, &(0x7f0000000a00)={0x15aa, 0x4, 0x3, 0xffffffff, 0xed, 0x7, 0xc0000, 0x2}, &(0x7f0000000a40)={0x6, 0x7, 0x80000000, 0x8, 0x5, 0x401, 0xfffffffffffff001, 0x3}, &(0x7f0000000a80)={0x77359400}, &(0x7f0000000b00)={&(0x7f0000000ac0), 0x8}) 03:42:42 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="7081217bd282"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x23c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc007}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x91}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7584}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x756}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xcf, 0x3, "870c0637f58b9ac68f61ee0c6fd2bf3c66228133141269c2ae86f23d877320fd67390334bd888950862aa9323d152a63e4b52d56043c290c7ef1aa8fc4c13abef12bf7df7476665e3681c35c442e67a55600069d44200935231cfd6e90c4841b611c25593f351192f72d9c42d18c934c81446d6a8b6df6eb47ded2e3f7c89010ed458b5f165c10aedbe3ebf2545fd63a54a3d28370b5c56d90f086b65345c2aa67790a3064ea3e5b3492c5f77ef07570e53a5c0c59597a3ee335a4be4c0de0cea7bab9cae63bbb389e897d"}, @TIPC_NLA_NODE_ID={0x36, 0x3, "7e01def49f8b2189ffafa9bf57a01b513899b80f9b52d03bea3a4a15eade6116ddd4d448fcdc73ba475361c9667987e4fa8e"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x840) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x52}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) socketpair(0x28, 0x800, 0x2, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40020}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000900)={'wlan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000a80)={'gre0\x00', &(0x7f0000000980)={'erspan0\x00', r0, 0x700, 0x0, 0xfb6, 0x7, {{0x2d, 0x4, 0x3, 0x1b, 0xb4, 0x68, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x1c, 0x8, 0x3, 0x8, [{@broadcast, 0x6}, {@rand_addr=0x64010102, 0x3}, {@broadcast, 0x3ff}]}, @timestamp_prespec={0x44, 0x3c, 0xff, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x7ff}, {@multicast2, 0x4}, {@empty, 0x31}, {@private=0xa010102, 0x6a7c}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x25d}, {@rand_addr=0x64010100, 0x79}, {@multicast1, 0x100}]}, @ssrr={0x89, 0x1f, 0xa5, [@dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x29}, @remote, @broadcast, @rand_addr=0x64010101]}, @cipso={0x86, 0x1e, 0x2, [{0x1, 0x9, "68a9c8496a476f"}, {0x0, 0xf, "bb8f0e55bbb18822c0ab2156af"}]}, @end, @ssrr={0x89, 0x7, 0xc9, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa4, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4080}, 0x0) gettid() sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5b63}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0xc0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x75}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008044}, 0x8000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24004080) 03:42:42 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socketpair(0x22, 0x1, 0xdb8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140), 0x4) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x6, 0xc000) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0xa49000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@afid={'afid', 0x3d, 0x80000001}}, {@cache_mmap}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/vcs\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@obj_user={'obj_user', 0x3d, '/dev/vcs\x00'}}, {@hash}]}}) r3 = fsmount(r0, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2049000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '%'}}, {@cache_fscache}], [{@fsname={'fsname', 0x3d, '^&*'}}, {@hash}, {@euid_lt={'euid<', r4}}, {@fsmagic={'fsmagic', 0x3d, 0xeaa}}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x90$@\\'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@fsname={'fsname', 0x3d, '/dev/vcs\x00'}}, {@subj_type={'subj_type', 0x3d, 'smackfshat'}}]}}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000600)=0x4, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040801}, 0x850) r6 = accept$inet(r3, 0x0, &(0x7f0000000780)) accept(r6, &(0x7f00000007c0)=@phonet, &(0x7f0000000840)=0x80) r7 = socket(0x3, 0x6, 0x3ff) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @mcast2, 0x4}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x11) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000802}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x60, r8, 0xc30, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x35}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x234}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1f}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000830}, 0x4004044) fspick(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x0) 03:42:42 executing program 3: clock_gettime(0x6, &(0x7f0000000000)) clock_gettime(0x4, &(0x7f0000000040)) futex(&(0x7f0000000080), 0xd, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x2) setrlimit(0x9, &(0x7f0000000140)={0x1ff, 0x9}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0xfff, 0x2, 0x81, 0x44, 0x8, 0x5, 0x8, 0x9}, &(0x7f00000001c0)={0x9, 0x8, 0x5, 0x0, 0x3f, 0xe1, 0x5, 0x9}, &(0x7f0000000200)={0xd6e, 0xfa0, 0x9, 0x7, 0x4c, 0xffffffff00000001, 0x1, 0xc068}, &(0x7f0000000280)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) prctl$PR_GET_TSC(0x19, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000380)={0x3f, 0x516, 0x2, 0x7, 0x1000, 0x8, 0xfff, 0xffffffffffffffe1}, &(0x7f00000003c0)={0x5, 0xd4c, 0x6, 0xff, 0x8, 0x4, 0x1000, 0x8000}, &(0x7f0000000400)={0x8, 0x6, 0x2680000, 0x7, 0x338, 0x7f, 0x6, 0xffffffffffffffaf}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x3]}, 0x8}) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) futex(&(0x7f0000000540)=0x1, 0xb, 0x2, &(0x7f00000005c0)={r3, r4+10000000}, &(0x7f0000000600)=0x1, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000640)={0x3, 0x9, 0xffffffff, 0xce5b, 0x0, 0x7, 0x80000001, 0x8}, &(0x7f0000000680)={0x6, 0x2, 0x3, 0xfff, 0x5, 0x4, 0x100, 0x7ff}, &(0x7f00000006c0)={0x100000001, 0x401, 0x5, 0xb56, 0x8, 0x2, 0x80, 0x4}, &(0x7f0000000740)={r5, r6+10000000}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x401]}, 0x8}) pselect6(0x40, &(0x7f00000009c0)={0xffffffffffff8001, 0x7fffffff, 0x1, 0x6, 0x5, 0xe8, 0x2, 0xffffffffffffff7f}, &(0x7f0000000a00)={0x15aa, 0x4, 0x3, 0xffffffff, 0xed, 0x7, 0xc0000, 0x2}, &(0x7f0000000a40)={0x6, 0x7, 0x80000000, 0x8, 0x5, 0x401, 0xfffffffffffff001, 0x3}, &(0x7f0000000a80)={0x77359400}, &(0x7f0000000b00)={&(0x7f0000000ac0), 0x8}) 03:42:42 executing program 5: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x4, 0x7, 0x58, 0x9, 0x1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x4, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x40, 0x7, 0x1, 0x1, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x66, 0x0, 0x3f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@cipso={0x86, 0x1a, 0x1, [{0x0, 0x7, "ae9745467a"}, {0x6, 0x8, "9b734a95d62f"}, {0x6, 0x5, "1c03eb"}]}]}}}}}) r3 = socket(0x2b, 0x2, 0xb06) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x6a2e, &(0x7f0000000240)={0x0, 0x49d1, 0x8, 0x0, 0x376}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xc000010, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000340)=0x1, 0x4) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xa110}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0461c46e6632"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x200048c1}, 0x20000000) 03:42:42 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:wireless_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r1, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:netcontrol_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hostname_exec_t:s0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000880)={&(0x7f0000000300), 0xc, &(0x7f0000000840)={&(0x7f0000000340)={0x4f4, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x1e8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ID={0x69, 0x3, "c18a3be267c43f7048235680f5ea8772b35d740c63aff19c3baf23958f8c6706c492e826424dd5721eae7dbf6e438806d1c0b49c4e01da4af62533a0507467c9a6704b3f422cedc6056c0d3b99298a4353086c38d091b40ca34563499e82e167aba3eeda07"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd8, 0x3, "7909fe3809aa1298a7510eb16c58e7203a9c815663218fa9f3acfb0594ad75b599a559d2a6812baf8557bb00253c242375c91a04407e4932bb4afe9aecd4aa1a6295c29682ff5d9bbdc06db02f9dea867bca1f8fa44db742f2c1213060a0b77e88a53d01b68ca7c09779c989cb135fbf6418ee70acc73c44fdf4173608818249e023e21fba7da05deacfe18a1c5e53a28c85a866794c91821a9b20c992738cdda964ab69d3f0787e819379376e91d3c80bb0f3d0f0e72c569f78744d4f33bf297672e1f2db1f558a491c214769191b900cdca78b"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "c4e292246ee170ce803abfbc1c8b54d5438fccb8e75e2893e3c5c72e29d04b600b2e40"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "2d06a6153b1968ae9810ec9bd3245f94c7c8bec9c91ca75bf07c35255c1c54"}}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @remote, 0x1acdef88}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x101, @remote, 0xbce}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10001, @local, 0x7f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2d48bf2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x67, 0x3, "345fed761d1b84c86719323193c318a730bf61122221c1b6a0432e65ced336edfeb013eeaf7497d8fef803f8af10cfb2c3a313df1770fe9030ee63e54c7bb92538c0f48fccc668c6e2887320dfc8506281f158b97302f38717457493f51fdcc1d93dcc"}, @TIPC_NLA_NODE_ID={0x93, 0x3, "c8076e039f36af3ae398af63f04a3e13940e53f4e849a8bc9fee04625152f0e785d2dc92e31427a6a487a08335d4c23acd075a74d2998983090b956fc01aa161d41421d77cf30b4897e4da1d66a6cf84f0cbc77ae83b14d5021abdba8d72ffe6e6f39fd141d06bbce5a1ff6cac64b6ef29047dbfb4641532b23f7aa0b746dfa9b54ae56d1bbef8f1b81bfe015c7414"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x622a5a7a}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x805}, 0xc081) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x9) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000009c0)) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000a00)=@ccm_128={{0x304}, "4fff8127a957da17", "e46c67775e4828ff4ab1347329f54bb7", "e0e3e98b", "95cfd208dfb9589d"}, 0x28) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x7c, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:file_context_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44401}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000c00)=0x1, 0x4) r4 = socket(0xa, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c40)={'batadv_slave_1\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20040047) [ 132.676502] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 132.677377] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 132.678190] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.678958] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.679768] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 132.680537] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 132.681314] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 132.697690] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 133.909547] Bluetooth: hci0: command 0x0c1a tx timeout [ 134.677583] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.774531] Bluetooth: hci7: command 0x0c1a tx timeout [ 134.775610] Bluetooth: hci6: command 0x0c1a tx timeout [ 134.776610] Bluetooth: hci5: command 0x0c1a tx timeout [ 134.778542] Bluetooth: hci4: command 0x0c1a tx timeout [ 134.779516] Bluetooth: hci3: command 0x0c1a tx timeout [ 134.780439] Bluetooth: hci2: command 0x0c1a tx timeout 03:42:50 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040)) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000080)={0xffffffff7fffffff, 0xffffffee}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0xc, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x2000c000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4280}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x24000004) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) r1 = syz_open_dev$rtc(&(0x7f00000002c0), 0x8000, 0x20240) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000300)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000380)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x25c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x23c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_NODE={0x10c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x100, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2260}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xee}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x88b}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7a2d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700), 0x80000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x74, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xcc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x85}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x74}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r3, &(0x7f0000000a80)=@ll={0x11, 0x0, 0x0}, &(0x7f0000000b00)=0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000d00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc0}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 03:42:50 executing program 3: clock_gettime(0x6, &(0x7f0000000000)) clock_gettime(0x4, &(0x7f0000000040)) futex(&(0x7f0000000080), 0xd, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x2) setrlimit(0x9, &(0x7f0000000140)={0x1ff, 0x9}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0xfff, 0x2, 0x81, 0x44, 0x8, 0x5, 0x8, 0x9}, &(0x7f00000001c0)={0x9, 0x8, 0x5, 0x0, 0x3f, 0xe1, 0x5, 0x9}, &(0x7f0000000200)={0xd6e, 0xfa0, 0x9, 0x7, 0x4c, 0xffffffff00000001, 0x1, 0xc068}, &(0x7f0000000280)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) prctl$PR_GET_TSC(0x19, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000380)={0x3f, 0x516, 0x2, 0x7, 0x1000, 0x8, 0xfff, 0xffffffffffffffe1}, &(0x7f00000003c0)={0x5, 0xd4c, 0x6, 0xff, 0x8, 0x4, 0x1000, 0x8000}, &(0x7f0000000400)={0x8, 0x6, 0x2680000, 0x7, 0x338, 0x7f, 0x6, 0xffffffffffffffaf}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x3]}, 0x8}) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) futex(&(0x7f0000000540)=0x1, 0xb, 0x2, &(0x7f00000005c0)={r3, r4+10000000}, &(0x7f0000000600)=0x1, 0x0) clock_gettime(0x0, &(0x7f0000000700)) pselect6(0x40, &(0x7f00000009c0)={0xffffffffffff8001, 0x7fffffff, 0x1, 0x6, 0x5, 0xe8, 0x2, 0xffffffffffffff7f}, &(0x7f0000000a00)={0x15aa, 0x4, 0x3, 0xffffffff, 0xed, 0x7, 0xc0000, 0x2}, &(0x7f0000000a40)={0x6, 0x7, 0x80000000, 0x8, 0x5, 0x401, 0xfffffffffffff001, 0x3}, &(0x7f0000000a80)={0x77359400}, &(0x7f0000000b00)={&(0x7f0000000ac0), 0x8}) 03:42:50 executing program 0: ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x2, @time={0x2, 0xea}, 0x5, {0xff, 0x9}, 0x1, 0x0, 0xfe}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="6be510a4b1b7d6f3ae47feb9b0928abf1ccccbe96907549d359215d5b558275dde3d7731ab7576eb82fbab7b5854ef8775166db08fd7397d8eab8675cf88c4d79110f10cd275d05127239393fa8ee5f7b7ef4b8aeddf132322d43f8866954725d0dd9d36c3c842833e7bf2862eaabb80be9ff48a45b5df13c6f5ed8e3d566254dea8a67bb9c469ddc6a949620efa5001df1c504134cfcacc38af9130fe4a1021793f1b48d1428ac099b03b5ea5490396d326dc486d377e35bd014582299191f48c67a41ae36e35392ada9130a466467b031c14428b83d755283378fdd4", 0xdd) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) getsockopt$inet_int(r0, 0x0, 0x16, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x130, 0x218, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000340), {[{{@arp={@local, @multicast1, 0xff000000, 0xff000000, 0x0, 0x5, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x9, 0x0, 0x2, 0xfffd, 0x7, 0x2, 'wg2\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x0, 0x12c}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x10, 0x0, 0x8000, 0x0, 0x0, "643965a46e8c29e0614c68b7b80708d1cfeff60c9b837a71795c94df7326e1c3c9444c7b0307e606a29a6be7847b1c91aea22a50fd1dc73b9a6e62d5f8b6673b"}}}, {{@arp={@multicast1, @multicast2, 0xffffffff, 0xffffff00, 0xd, 0x4, {@mac, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x1fe, 0x0, 0xff, 0xff]}}, 0x5, 0xa20e, 0x1, 0x5d8, 0x800, 0x7, 'batadv_slave_0\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x158}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfff}}}, {{@arp={@broadcast, @local, 0xff000000, 0xff000000, 0x9, 0x9, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@random="49569efb6feb", {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x14b, 0x401, 0x1, 0x6, 0x7, 0x0, 'macsec0\x00', 'bridge0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000007c0)="93557b98b087e78b7a92d768033a64de1d5820d58a83ca91e0120d21fedce23ac62693ff4fdc3a42e956ca2f477fd986daea0b177051ca0572aa1b3432e3c3dd37bd76ad74d5280905b37ea148e5cafa29ae175932fabbb0203912478fe8e2cb51146b5734b6ce5e64971bd70417ca9e978e6685acb6acd9a4c45b1c10b7d799b39c905d8f0f30d80dd208c89872c918a7eec954605a31ab3a7521ac589d99579b8a5d66c3cd59c8ebc9ff83d0a23b9af8053db11e324129d9f3c75b294dbfbfdd1d622c97f21023b9fc73167ed5495f3696ececd412", 0xd6) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000008c0)="1dbf8779164187f70a0dd9e5f3779726d58f942cf280c529c46bfd351224b7b8b0d8310365e08330c3650858139a3be2715a74", 0x33) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x101402) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r2, 0x824, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40010) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000a80)={{{@in6=@local, @in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000b80)=0xe8) getegid() sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x988c, 0x7e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) 03:42:50 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:wireless_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r1, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:netcontrol_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hostname_exec_t:s0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000880)={&(0x7f0000000300), 0xc, &(0x7f0000000840)={&(0x7f0000000340)={0x4f4, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x1e8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ID={0x69, 0x3, "c18a3be267c43f7048235680f5ea8772b35d740c63aff19c3baf23958f8c6706c492e826424dd5721eae7dbf6e438806d1c0b49c4e01da4af62533a0507467c9a6704b3f422cedc6056c0d3b99298a4353086c38d091b40ca34563499e82e167aba3eeda07"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd8, 0x3, "7909fe3809aa1298a7510eb16c58e7203a9c815663218fa9f3acfb0594ad75b599a559d2a6812baf8557bb00253c242375c91a04407e4932bb4afe9aecd4aa1a6295c29682ff5d9bbdc06db02f9dea867bca1f8fa44db742f2c1213060a0b77e88a53d01b68ca7c09779c989cb135fbf6418ee70acc73c44fdf4173608818249e023e21fba7da05deacfe18a1c5e53a28c85a866794c91821a9b20c992738cdda964ab69d3f0787e819379376e91d3c80bb0f3d0f0e72c569f78744d4f33bf297672e1f2db1f558a491c214769191b900cdca78b"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "c4e292246ee170ce803abfbc1c8b54d5438fccb8e75e2893e3c5c72e29d04b600b2e40"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "2d06a6153b1968ae9810ec9bd3245f94c7c8bec9c91ca75bf07c35255c1c54"}}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @remote, 0x1acdef88}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x101, @remote, 0xbce}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10001, @local, 0x7f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2d48bf2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x67, 0x3, "345fed761d1b84c86719323193c318a730bf61122221c1b6a0432e65ced336edfeb013eeaf7497d8fef803f8af10cfb2c3a313df1770fe9030ee63e54c7bb92538c0f48fccc668c6e2887320dfc8506281f158b97302f38717457493f51fdcc1d93dcc"}, @TIPC_NLA_NODE_ID={0x93, 0x3, "c8076e039f36af3ae398af63f04a3e13940e53f4e849a8bc9fee04625152f0e785d2dc92e31427a6a487a08335d4c23acd075a74d2998983090b956fc01aa161d41421d77cf30b4897e4da1d66a6cf84f0cbc77ae83b14d5021abdba8d72ffe6e6f39fd141d06bbce5a1ff6cac64b6ef29047dbfb4641532b23f7aa0b746dfa9b54ae56d1bbef8f1b81bfe015c7414"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x622a5a7a}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x805}, 0xc081) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x9) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000009c0)) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000a00)=@ccm_128={{0x304}, "4fff8127a957da17", "e46c67775e4828ff4ab1347329f54bb7", "e0e3e98b", "95cfd208dfb9589d"}, 0x28) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x7c, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:file_context_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44401}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000c00)=0x1, 0x4) socket(0xa, 0x3, 0x9) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c80), 0x140, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20040047) 03:42:50 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="7081217bd282"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x23c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc007}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x91}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7584}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x756}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xcf, 0x3, "870c0637f58b9ac68f61ee0c6fd2bf3c66228133141269c2ae86f23d877320fd67390334bd888950862aa9323d152a63e4b52d56043c290c7ef1aa8fc4c13abef12bf7df7476665e3681c35c442e67a55600069d44200935231cfd6e90c4841b611c25593f351192f72d9c42d18c934c81446d6a8b6df6eb47ded2e3f7c89010ed458b5f165c10aedbe3ebf2545fd63a54a3d28370b5c56d90f086b65345c2aa67790a3064ea3e5b3492c5f77ef07570e53a5c0c59597a3ee335a4be4c0de0cea7bab9cae63bbb389e897d"}, @TIPC_NLA_NODE_ID={0x36, 0x3, "7e01def49f8b2189ffafa9bf57a01b513899b80f9b52d03bea3a4a15eade6116ddd4d448fcdc73ba475361c9667987e4fa8e"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x840) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x52}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) socketpair(0x28, 0x800, 0x2, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40020}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000900)={'wlan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000a80)={'gre0\x00', &(0x7f0000000980)={'erspan0\x00', r0, 0x700, 0x0, 0xfb6, 0x7, {{0x2d, 0x4, 0x3, 0x1b, 0xb4, 0x68, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x1c, 0x8, 0x3, 0x8, [{@broadcast, 0x6}, {@rand_addr=0x64010102, 0x3}, {@broadcast, 0x3ff}]}, @timestamp_prespec={0x44, 0x3c, 0xff, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x7ff}, {@multicast2, 0x4}, {@empty, 0x31}, {@private=0xa010102, 0x6a7c}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x25d}, {@rand_addr=0x64010100, 0x79}, {@multicast1, 0x100}]}, @ssrr={0x89, 0x1f, 0xa5, [@dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x29}, @remote, @broadcast, @rand_addr=0x64010101]}, @cipso={0x86, 0x1e, 0x2, [{0x1, 0x9, "68a9c8496a476f"}, {0x0, 0xf, "bb8f0e55bbb18822c0ab2156af"}]}, @end, @ssrr={0x89, 0x7, 0xc9, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa4, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4080}, 0x0) gettid() sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5b63}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0xc0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x75}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008044}, 0x8000) 03:42:50 executing program 5: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x4, 0x7, 0x58, 0x9, 0x1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x4, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x40, 0x7, 0x1, 0x1, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x66, 0x0, 0x3f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@cipso={0x86, 0x1a, 0x1, [{0x0, 0x7, "ae9745467a"}, {0x6, 0x8, "9b734a95d62f"}, {0x6, 0x5, "1c03eb"}]}]}}}}}) r3 = socket(0x2b, 0x2, 0xb06) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x6a2e, &(0x7f0000000240)={0x0, 0x49d1, 0x8, 0x0, 0x376}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xc000010, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xa110}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0461c46e6632"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x200048c1}, 0x20000000) 03:42:50 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socketpair(0x22, 0x1, 0xdb8, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140), 0x4) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x6, 0xc000) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0xa49000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@afid={'afid', 0x3d, 0x80000001}}, {@cache_mmap}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/vcs\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@obj_user={'obj_user', 0x3d, '/dev/vcs\x00'}}, {@hash}]}}) r3 = fsmount(r0, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x2049000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '%'}}, {@cache_fscache}], [{@fsname={'fsname', 0x3d, '^&*'}}, {@hash}, {@euid_lt={'euid<', r4}}, {@fsmagic={'fsmagic', 0x3d, 0xeaa}}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x90$@\\'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@fsname={'fsname', 0x3d, '/dev/vcs\x00'}}, {@subj_type={'subj_type', 0x3d, 'smackfshat'}}]}}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000600)=0x4, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040801}, 0x850) r6 = accept$inet(r3, 0x0, &(0x7f0000000780)) accept(r6, &(0x7f00000007c0)=@phonet, &(0x7f0000000840)=0x80) r7 = socket(0x3, 0x6, 0x3ff) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @mcast2, 0x4}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x11) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) fspick(0xffffffffffffffff, &(0x7f0000000cc0)='./file0\x00', 0x0) 03:42:50 executing program 4: socketpair(0x3c, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4041) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = accept(r0, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f00000001c0)=0x80) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0xc) r3 = socket(0x28, 0x6, 0x80000001) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000480)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r2) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x8, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8000041) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1) r6 = accept(r2, &(0x7f00000006c0)=@phonet, &(0x7f0000000740)=0x80) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x15041}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00'}) socket(0x1f, 0x3, 0x0) getpeername(r2, &(0x7f0000000900)=@qipcrtr, &(0x7f0000000980)=0x80) 03:42:50 executing program 5: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x3}, 0x4) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x4, 0x7, 0x58, 0x9, 0x1, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x4, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x40, 0x7, 0x1, 0x1, {{0xc, 0x4, 0x3, 0x4, 0x30, 0x66, 0x0, 0x3f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@cipso={0x86, 0x1a, 0x1, [{0x0, 0x7, "ae9745467a"}, {0x6, 0x8, "9b734a95d62f"}, {0x6, 0x5, "1c03eb"}]}]}}}}}) r3 = socket(0x2b, 0x2, 0xb06) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x6a2e, &(0x7f0000000240)={0x0, 0x49d1, 0x8, 0x0, 0x376}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xc000010, r4, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0xa110}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="0461c46e6632"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x200048c1}, 0x20000000) 03:42:50 executing program 3: clock_gettime(0x6, &(0x7f0000000000)) clock_gettime(0x4, &(0x7f0000000040)) futex(&(0x7f0000000080), 0xd, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x2) setrlimit(0x9, &(0x7f0000000140)={0x1ff, 0x9}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0xfff, 0x2, 0x81, 0x44, 0x8, 0x5, 0x8, 0x9}, &(0x7f00000001c0)={0x9, 0x8, 0x5, 0x0, 0x3f, 0xe1, 0x5, 0x9}, &(0x7f0000000200)={0xd6e, 0xfa0, 0x9, 0x7, 0x4c, 0xffffffff00000001, 0x1, 0xc068}, &(0x7f0000000280)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x1]}, 0x8}) prctl$PR_GET_TSC(0x19, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000380)={0x3f, 0x516, 0x2, 0x7, 0x1000, 0x8, 0xfff, 0xffffffffffffffe1}, &(0x7f00000003c0)={0x5, 0xd4c, 0x6, 0xff, 0x8, 0x4, 0x1000, 0x8000}, &(0x7f0000000400)={0x8, 0x6, 0x2680000, 0x7, 0x338, 0x7f, 0x6, 0xffffffffffffffaf}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x3]}, 0x8}) r2 = gettid() sched_rr_get_interval(r2, &(0x7f0000000500)) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) futex(&(0x7f0000000540)=0x1, 0xb, 0x2, &(0x7f00000005c0)={r3, r4+10000000}, &(0x7f0000000600)=0x1, 0x0) pselect6(0x40, &(0x7f00000009c0)={0xffffffffffff8001, 0x7fffffff, 0x1, 0x6, 0x5, 0xe8, 0x2, 0xffffffffffffff7f}, &(0x7f0000000a00)={0x15aa, 0x4, 0x3, 0xffffffff, 0xed, 0x7, 0xc0000, 0x2}, &(0x7f0000000a40)={0x6, 0x7, 0x80000000, 0x8, 0x5, 0x401, 0xfffffffffffff001, 0x3}, &(0x7f0000000a80)={0x77359400}, &(0x7f0000000b00)={&(0x7f0000000ac0), 0x8}) 03:42:50 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2d}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:wireless_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, r1, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:netcontrol_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:hostname_exec_t:s0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000880)={&(0x7f0000000300), 0xc, &(0x7f0000000840)={&(0x7f0000000340)={0x4f4, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x1e8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ID={0x69, 0x3, "c18a3be267c43f7048235680f5ea8772b35d740c63aff19c3baf23958f8c6706c492e826424dd5721eae7dbf6e438806d1c0b49c4e01da4af62533a0507467c9a6704b3f422cedc6056c0d3b99298a4353086c38d091b40ca34563499e82e167aba3eeda07"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd8, 0x3, "7909fe3809aa1298a7510eb16c58e7203a9c815663218fa9f3acfb0594ad75b599a559d2a6812baf8557bb00253c242375c91a04407e4932bb4afe9aecd4aa1a6295c29682ff5d9bbdc06db02f9dea867bca1f8fa44db742f2c1213060a0b77e88a53d01b68ca7c09779c989cb135fbf6418ee70acc73c44fdf4173608818249e023e21fba7da05deacfe18a1c5e53a28c85a866794c91821a9b20c992738cdda964ab69d3f0787e819379376e91d3c80bb0f3d0f0e72c569f78744d4f33bf297672e1f2db1f558a491c214769191b900cdca78b"}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "c4e292246ee170ce803abfbc1c8b54d5438fccb8e75e2893e3c5c72e29d04b600b2e40"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "2d06a6153b1968ae9810ec9bd3245f94c7c8bec9c91ca75bf07c35255c1c54"}}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @remote, 0x1acdef88}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x101, @remote, 0xbce}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10001, @local, 0x7f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2d48bf2f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x67, 0x3, "345fed761d1b84c86719323193c318a730bf61122221c1b6a0432e65ced336edfeb013eeaf7497d8fef803f8af10cfb2c3a313df1770fe9030ee63e54c7bb92538c0f48fccc668c6e2887320dfc8506281f158b97302f38717457493f51fdcc1d93dcc"}, @TIPC_NLA_NODE_ID={0x93, 0x3, "c8076e039f36af3ae398af63f04a3e13940e53f4e849a8bc9fee04625152f0e785d2dc92e31427a6a487a08335d4c23acd075a74d2998983090b956fc01aa161d41421d77cf30b4897e4da1d66a6cf84f0cbc77ae83b14d5021abdba8d72ffe6e6f39fd141d06bbce5a1ff6cac64b6ef29047dbfb4641532b23f7aa0b746dfa9b54ae56d1bbef8f1b81bfe015c7414"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x622a5a7a}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x805}, 0xc081) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x24004000) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x9) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000009c0)) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000a00)=@ccm_128={{0x304}, "4fff8127a957da17", "e46c67775e4828ff4ab1347329f54bb7", "e0e3e98b", "95cfd208dfb9589d"}, 0x28) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x7c, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:file_context_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44401}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000c00)=0x1, 0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000c80), 0x140, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x22}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20040047) [ 141.612396] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.613721] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.615773] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.616761] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.618396] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 141.619883] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 141.621435] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 141.622713] Bluetooth: hci7: Opcode 0x0c1a failed: -4 VM DIAGNOSIS: 03:42:42 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d172ee RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801ae87b18 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff110035d0f64 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801ae87b50 RIP=ffffffff84d17480 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557d79d400 00000000 00000000 GS =0000 ffff8880e5343000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc9a063f8e0 CR3=000000001c1ba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f7dc5da67c000007f7dc5da67c8 XMM02=00007f7dc5da67e000007f7dc5da67c0 XMM03=00007f7dc5da67c800007f7dc5da67c0 XMM04=ffffffff83cd1250ffffffff81c2d38d XMM05=ffffffff81c2d377ffffffff81c2d1f9 XMM06=ffffffff81c2d00affffffff81c2cf8a XMM07=ffffffff81c2cf55ffffffff81c2cf38 XMM08=ba2fa14c5205eb3504f9949202721eab XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82973905 RDI=ffffffff889c0960 RBP=ffffffff889c0920 RSP=ffff88804499f4a8 R8 =0000000000000000 R9 =ffffed100176a046 R10=000000000000003a R11=206f7420676e6973 R12=000000000000003a R13=0000000000000010 R14=ffffffff889c0920 R15=ffffffff829738f0 RIP=ffffffff8297395d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555d50b400 00000000 00000000 GS =0000 ffff8880e5443000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c005e30000 CR3=000000004c28d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000