Warning: Permanently added '[localhost]:30259' (ECDSA) to the list of known hosts. 2026/01/17 11:39:10 fuzzer started 2026/01/17 11:39:10 dialing manager at localhost:42157 syzkaller login: [ 51.509079] cgroup: Unknown subsys name 'net' [ 51.568340] cgroup: Unknown subsys name 'cpuset' [ 51.578038] cgroup: Unknown subsys name 'rlimit' 2026/01/17 11:39:22 syscalls: 217 2026/01/17 11:39:22 code coverage: enabled 2026/01/17 11:39:22 comparison tracing: enabled 2026/01/17 11:39:22 extra coverage: enabled 2026/01/17 11:39:22 setuid sandbox: enabled 2026/01/17 11:39:22 namespace sandbox: enabled 2026/01/17 11:39:22 Android sandbox: enabled 2026/01/17 11:39:22 fault injection: enabled 2026/01/17 11:39:22 leak checking: enabled 2026/01/17 11:39:22 net packet injection: enabled 2026/01/17 11:39:22 net device setup: enabled 2026/01/17 11:39:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/17 11:39:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/17 11:39:22 USB emulation: enabled 2026/01/17 11:39:22 hci packet injection: enabled 2026/01/17 11:39:22 wifi device emulation: enabled 2026/01/17 11:39:22 802.15.4 emulation: enabled 2026/01/17 11:39:22 fetching corpus: 0, signal 0/0 (executing program) 2026/01/17 11:39:23 starting 8 fuzzer processes 11:39:23 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x20, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x1) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x38, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x41) 11:39:23 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x0, 0x0, @d}, 0x18, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x27}}, @FOU_ATTR_AF={0x5, 0x2, 0x1e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x3c}}, 0x4000) add_key$fscrypt_provisioning(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)={0x1, 0x0, @c}, 0x29, r1) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, r1) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) add_key$fscrypt_provisioning(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)={0x2, 0x0, @auto=[0x20]}, 0x9, r3) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x32, 0x65, 0x39, 0x30, 0x30, 0x64, 0x30, 0x66, 0x34, 0x66, 0x63, 0x32, 0x35, 0x30, 0x62]}, &(0x7f0000000880)={0x0, "5a8af73ba8253bbeddacdf8fa98d43c7981f1f64e710fb1d2f98ada1a292b4daf45d9ce9c52c92d4c30348e5595e5ae61dccc46303e7c46345694326b3da6bb5", 0x2d}, 0x48, r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x3}, 0x0, 0x0, r5) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000a00), r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000bc0)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, r7, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:39:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000000900)={0xc80, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x298, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5fd67367}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfd7f}}, {0x8, 0x6, r5}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x5, 0x40, 0x3}, {0x6, 0x40, 0xc7, 0xffffffff}, {0x2, 0x68, 0x3f, 0xf76}, {0x6e16, 0x1, 0xff, 0x8}, {0x7ff, 0x59, 0x8d, 0x80000001}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x3, 0x7}, {0xad9, 0x5, 0xe, 0xffffffff}, {0x5, 0x5, 0x5, 0x2}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6c, 0x3, 0x8, 0x9}, {0x9, 0x4, 0xc0, 0x4}, {0x7, 0x81, 0x4b, 0x5}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8b08, 0x7f, 0x0, 0xd4}, {0x0, 0x4, 0x3, 0x5}, {0x8, 0x6, 0x1, 0x3}, {0x3, 0xeb, 0x6, 0x6}, {0xc79, 0x52, 0x75, 0xfffffff7}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x575890b2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0x3, 0x1, 0x8000}]}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x361}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0xc80}, 0x1, 0x0, 0x0, 0x24004000}, 0x95) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001600)={0x0, 0x2, r0, 0x20}) r16 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r16, 0x810c9365, &(0x7f0000001680)={{0xff, 0x2}, 0x100, './file0\x00'}) 11:39:23 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r1) r2 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = accept4(r2, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80, 0x1000) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x24}}, 0x4040810) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000003c0)={0x0, 0x8, 0xffffff00}) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x34, 0x64, 0x33, 0x64, 0x61, 0x35, 0x37, 0x61, 0x64, 0x37, 0x32, 0x31, 0x32, 0x36, 0x35]}, &(0x7f0000000480)={0x0, "afea76716a6997568fa47d9ea46c2c84e27f4f7ba22bb6aa9997ae2aa6d9233fbfe1e86ef94bdb95a22064d27f9a54b0b59f887b7526252e3693bdbb86ac57bc", 0x10}, 0x48, 0xfffffffffffffff8) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r4, &(0x7f0000000580)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f00000005c0)) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001700)={&(0x7f0000000b40)={0xbac, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3ff, 0x1f, 0x61, 0x5}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}, {{0x8}, {0x15c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x78}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x240, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x81, 0x2, 0x5, 0x1}, {0x6, 0x9, 0x2, 0x8}, {0x5, 0x7, 0x3a, 0x101}, {0x7, 0x3f, 0x1f, 0x8001}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf9}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xfff, 0x8e, 0x0, 0x80000}, {0x90a, 0x4, 0x3, 0x401}, {0x2, 0x0, 0x0, 0x6}, {0x8, 0x98, 0xb1, 0x3f}, {0x6, 0x8, 0x3, 0x1}, {0x200, 0x4, 0x26, 0x5}, {0x3fd0, 0xea, 0x3, 0x5}, {0x7fff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb1}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0xbac}, 0x1, 0x0, 0x0, 0x7d197e60d7baa84e}, 0x0) [ 62.891743] audit: type=1400 audit(1768649963.594:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 11:39:23 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) r2 = socket(0x5, 0x6, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000001c0)=0x5, 0x4) lseek(r2, 0x101, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000380)={0x53, ""/83}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40202000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008014}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r3) lseek(r3, 0x401, 0x1) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x6f, 0x35, 0x32, 0x63, 0x61, 0x64, 0x32, 0x62, 0x64, 0x66, 0x36, 0x66, 0x63, 0x35, 0x62, 0x33]}, &(0x7f00000005c0)={0x0, "93a50131676e756fda7c7c01fab9807b141083bc40a0133e815d522c9bb9dbaa59b1dca7c47ce0dba49de5538520cc00d95b7f94fa0f54f5b5d37a651e411488", 0x32}, 0x48, r0) r4 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r4, 0x0, &(0x7f0000000740)='(]!\x00') 11:39:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0xd9, ""/217}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000240)=0x7) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000280)=0x8001) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000340)=r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffff801}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r6, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f84}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x40885) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x606d01, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r7, 0x2287, &(0x7f00000006c0)=0xffff) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000700)) connect$bt_l2cap(r3, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:39:23 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r2 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r2, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000500)=0x8, 0x4) getsockname(r1, &(0x7f0000000540)=@ieee802154={0x24, @long}, &(0x7f00000005c0)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000600)={0x70, 0x20, 0xce1b, 0x6, 0x80, 0x40, 0xfb8c}, 0xc) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/bus/i2c', 0x1, 0x24) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000780)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000800)) r8 = accept4$bt_l2cap(r3, &(0x7f0000000840)={0x1f, 0x0, @none}, &(0x7f0000000880)=0xe, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc5}, 0x804) 11:39:23 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x240000d1) syz_io_uring_setup(0x75e5, &(0x7f0000001bc0)={0x0, 0xfc00, 0x0, 0x0, 0x2a, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001c40), &(0x7f0000001c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001cc0)={0x2, {{0xa, 0x4e23, 0xffff, @loopback, 0x5}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x3}}}, 0x108) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ec0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x4c, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbb23}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffff81}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000880) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) [ 64.040670] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.044664] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.048624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.056583] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.059521] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.158972] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.160823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.167737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.173609] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.176645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.178189] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.180605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.183381] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.189222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.192127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.194098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.200197] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.208613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.222074] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.225892] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.226961] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.242169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.247021] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.263180] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.280788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.306287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.317667] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 64.320475] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.333779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.335365] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.336796] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.343208] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.343629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.346597] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.373231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.379970] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 64.388221] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.402376] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 64.403990] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.412322] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.131318] Bluetooth: hci0: command tx timeout [ 66.259507] Bluetooth: hci1: command tx timeout [ 66.259727] Bluetooth: hci2: command tx timeout [ 66.324758] Bluetooth: hci4: command tx timeout [ 66.324826] Bluetooth: hci3: command tx timeout [ 66.450509] Bluetooth: hci5: command tx timeout [ 66.515563] Bluetooth: hci7: command tx timeout [ 66.516656] Bluetooth: hci6: command tx timeout [ 68.179213] Bluetooth: hci0: command tx timeout [ 68.307532] Bluetooth: hci1: command tx timeout [ 68.307959] Bluetooth: hci2: command tx timeout [ 68.371466] Bluetooth: hci3: command tx timeout [ 68.372476] Bluetooth: hci4: command tx timeout [ 68.500796] Bluetooth: hci5: command tx timeout [ 68.563299] Bluetooth: hci6: command tx timeout [ 68.563455] Bluetooth: hci7: command tx timeout [ 70.227810] Bluetooth: hci0: command tx timeout [ 70.355721] Bluetooth: hci2: command tx timeout [ 70.356483] Bluetooth: hci1: command tx timeout [ 70.418512] Bluetooth: hci3: command tx timeout [ 70.420194] Bluetooth: hci4: command tx timeout [ 70.548156] Bluetooth: hci5: command tx timeout [ 70.610588] Bluetooth: hci7: command tx timeout [ 70.612691] Bluetooth: hci6: command tx timeout [ 72.274649] Bluetooth: hci0: command tx timeout [ 72.403589] Bluetooth: hci2: command tx timeout [ 72.404049] Bluetooth: hci1: command tx timeout [ 72.467457] Bluetooth: hci4: command tx timeout [ 72.467942] Bluetooth: hci3: command tx timeout [ 72.594548] Bluetooth: hci5: command tx timeout [ 72.660214] Bluetooth: hci6: command tx timeout [ 72.660239] Bluetooth: hci7: command tx timeout [ 100.198905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.199832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.417175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.418159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.871147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.871798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.974228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.975613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.058327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.059501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.291316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.292397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.368050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.369277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.531684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.532768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.692459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.693084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.858901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.859530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.474262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.475141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.602986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.604212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.773947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.774719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.833060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.834203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.068861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.069722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.096774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.097345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:40:15 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) r2 = socket(0x5, 0x6, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000001c0)=0x5, 0x4) lseek(r2, 0x101, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000380)={0x53, ""/83}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40202000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008014}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r3) lseek(r3, 0x401, 0x1) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x6f, 0x35, 0x32, 0x63, 0x61, 0x64, 0x32, 0x62, 0x64, 0x66, 0x36, 0x66, 0x63, 0x35, 0x62, 0x33]}, &(0x7f00000005c0)={0x0, "93a50131676e756fda7c7c01fab9807b141083bc40a0133e815d522c9bb9dbaa59b1dca7c47ce0dba49de5538520cc00d95b7f94fa0f54f5b5d37a651e411488", 0x32}, 0x48, r0) r4 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r4, 0x0, &(0x7f0000000740)='(]!\x00') 11:40:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0xd9, ""/217}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000240)=0x7) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000280)=0x8001) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000340)=r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffff801}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r6, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f84}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x40885) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x606d01, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r7, 0x2287, &(0x7f00000006c0)=0xffff) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000700)) connect$bt_l2cap(r3, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:40:15 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x240000d1) syz_io_uring_setup(0x75e5, &(0x7f0000001bc0)={0x0, 0xfc00, 0x0, 0x0, 0x2a, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001c40), &(0x7f0000001c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001cc0)={0x2, {{0xa, 0x4e23, 0xffff, @loopback, 0x5}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x3}}}, 0x108) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ec0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x4c, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbb23}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffff81}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000880) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) 11:40:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000000900)={0xc80, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x298, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5fd67367}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfd7f}}, {0x8, 0x6, r5}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x5, 0x40, 0x3}, {0x6, 0x40, 0xc7, 0xffffffff}, {0x2, 0x68, 0x3f, 0xf76}, {0x6e16, 0x1, 0xff, 0x8}, {0x7ff, 0x59, 0x8d, 0x80000001}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x3, 0x7}, {0xad9, 0x5, 0xe, 0xffffffff}, {0x5, 0x5, 0x5, 0x2}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6c, 0x3, 0x8, 0x9}, {0x9, 0x4, 0xc0, 0x4}, {0x7, 0x81, 0x4b, 0x5}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8b08, 0x7f, 0x0, 0xd4}, {0x0, 0x4, 0x3, 0x5}, {0x8, 0x6, 0x1, 0x3}, {0x3, 0xeb, 0x6, 0x6}, {0xc79, 0x52, 0x75, 0xfffffff7}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x575890b2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0x3, 0x1, 0x8000}]}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x361}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0xc80}, 0x1, 0x0, 0x0, 0x24004000}, 0x95) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001600)={0x0, 0x2, r0, 0x20}) r16 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r16, 0x810c9365, &(0x7f0000001680)={{0xff, 0x2}, 0x100, './file0\x00'}) 11:40:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x20, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x1) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x38, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x41) 11:40:15 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r1) r2 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = accept4(r2, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80, 0x1000) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x24}}, 0x4040810) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000003c0)={0x0, 0x8, 0xffffff00}) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x34, 0x64, 0x33, 0x64, 0x61, 0x35, 0x37, 0x61, 0x64, 0x37, 0x32, 0x31, 0x32, 0x36, 0x35]}, &(0x7f0000000480)={0x0, "afea76716a6997568fa47d9ea46c2c84e27f4f7ba22bb6aa9997ae2aa6d9233fbfe1e86ef94bdb95a22064d27f9a54b0b59f887b7526252e3693bdbb86ac57bc", 0x10}, 0x48, 0xfffffffffffffff8) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r4, &(0x7f0000000580)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f00000005c0)) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001700)={&(0x7f0000000b40)={0xbac, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3ff, 0x1f, 0x61, 0x5}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}, {{0x8}, {0x15c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x78}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x240, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x81, 0x2, 0x5, 0x1}, {0x6, 0x9, 0x2, 0x8}, {0x5, 0x7, 0x3a, 0x101}, {0x7, 0x3f, 0x1f, 0x8001}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf9}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xfff, 0x8e, 0x0, 0x80000}, {0x90a, 0x4, 0x3, 0x401}, {0x2, 0x0, 0x0, 0x6}, {0x8, 0x98, 0xb1, 0x3f}, {0x6, 0x8, 0x3, 0x1}, {0x200, 0x4, 0x26, 0x5}, {0x3fd0, 0xea, 0x3, 0x5}, {0x7fff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb1}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0xbac}, 0x1, 0x0, 0x0, 0x7d197e60d7baa84e}, 0x0) 11:40:15 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r2 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r2, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000500)=0x8, 0x4) getsockname(r1, &(0x7f0000000540)=@ieee802154={0x24, @long}, &(0x7f00000005c0)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000600)={0x70, 0x20, 0xce1b, 0x6, 0x80, 0x40, 0xfb8c}, 0xc) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/bus/i2c', 0x1, 0x24) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000780)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000800)) r8 = accept4$bt_l2cap(r3, &(0x7f0000000840)={0x1f, 0x0, @none}, &(0x7f0000000880)=0xe, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc5}, 0x804) 11:40:15 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x0, 0x0, @d}, 0x18, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x27}}, @FOU_ATTR_AF={0x5, 0x2, 0x1e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x3c}}, 0x4000) add_key$fscrypt_provisioning(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)={0x1, 0x0, @c}, 0x29, r1) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, r1) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) add_key$fscrypt_provisioning(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)={0x2, 0x0, @auto=[0x20]}, 0x9, r3) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x32, 0x65, 0x39, 0x30, 0x30, 0x64, 0x30, 0x66, 0x34, 0x66, 0x63, 0x32, 0x35, 0x30, 0x62]}, &(0x7f0000000880)={0x0, "5a8af73ba8253bbeddacdf8fa98d43c7981f1f64e710fb1d2f98ada1a292b4daf45d9ce9c52c92d4c30348e5595e5ae61dccc46303e7c46345694326b3da6bb5", 0x2d}, 0x48, r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x3}, 0x0, 0x0, r5) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000a00), r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000bc0)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, r7, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:40:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0xd9, ""/217}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000240)=0x7) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000280)=0x8001) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000340)=r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffff801}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r6, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f84}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x40885) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x606d01, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r7, 0x2287, &(0x7f00000006c0)=0xffff) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000700)) connect$bt_l2cap(r3, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:40:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x20, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x1) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x38, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x41) 11:40:15 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r2 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r2, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000500)=0x8, 0x4) getsockname(r1, &(0x7f0000000540)=@ieee802154={0x24, @long}, &(0x7f00000005c0)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000600)={0x70, 0x20, 0xce1b, 0x6, 0x80, 0x40, 0xfb8c}, 0xc) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/bus/i2c', 0x1, 0x24) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000780)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000800)) r8 = accept4$bt_l2cap(r3, &(0x7f0000000840)={0x1f, 0x0, @none}, &(0x7f0000000880)=0xe, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc5}, 0x804) 11:40:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000000900)={0xc80, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x298, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5fd67367}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfd7f}}, {0x8, 0x6, r5}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x5, 0x40, 0x3}, {0x6, 0x40, 0xc7, 0xffffffff}, {0x2, 0x68, 0x3f, 0xf76}, {0x6e16, 0x1, 0xff, 0x8}, {0x7ff, 0x59, 0x8d, 0x80000001}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x3, 0x7}, {0xad9, 0x5, 0xe, 0xffffffff}, {0x5, 0x5, 0x5, 0x2}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6c, 0x3, 0x8, 0x9}, {0x9, 0x4, 0xc0, 0x4}, {0x7, 0x81, 0x4b, 0x5}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8b08, 0x7f, 0x0, 0xd4}, {0x0, 0x4, 0x3, 0x5}, {0x8, 0x6, 0x1, 0x3}, {0x3, 0xeb, 0x6, 0x6}, {0xc79, 0x52, 0x75, 0xfffffff7}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x575890b2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0x3, 0x1, 0x8000}]}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x361}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0xc80}, 0x1, 0x0, 0x0, 0x24004000}, 0x95) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001600)={0x0, 0x2, r0, 0x20}) r16 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r16, 0x810c9365, &(0x7f0000001680)={{0xff, 0x2}, 0x100, './file0\x00'}) 11:40:15 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) r2 = socket(0x5, 0x6, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000001c0)=0x5, 0x4) lseek(r2, 0x101, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000380)={0x53, ""/83}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40202000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008014}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r3) lseek(r3, 0x401, 0x1) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x6f, 0x35, 0x32, 0x63, 0x61, 0x64, 0x32, 0x62, 0x64, 0x66, 0x36, 0x66, 0x63, 0x35, 0x62, 0x33]}, &(0x7f00000005c0)={0x0, "93a50131676e756fda7c7c01fab9807b141083bc40a0133e815d522c9bb9dbaa59b1dca7c47ce0dba49de5538520cc00d95b7f94fa0f54f5b5d37a651e411488", 0x32}, 0x48, r0) r4 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r4, 0x0, &(0x7f0000000740)='(]!\x00') 11:40:15 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x240000d1) syz_io_uring_setup(0x75e5, &(0x7f0000001bc0)={0x0, 0xfc00, 0x0, 0x0, 0x2a, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001c40), &(0x7f0000001c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001cc0)={0x2, {{0xa, 0x4e23, 0xffff, @loopback, 0x5}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x3}}}, 0x108) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ec0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x4c, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbb23}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffff81}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000880) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) 11:40:15 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r1) r2 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = accept4(r2, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80, 0x1000) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x24}}, 0x4040810) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000003c0)={0x0, 0x8, 0xffffff00}) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x34, 0x64, 0x33, 0x64, 0x61, 0x35, 0x37, 0x61, 0x64, 0x37, 0x32, 0x31, 0x32, 0x36, 0x35]}, &(0x7f0000000480)={0x0, "afea76716a6997568fa47d9ea46c2c84e27f4f7ba22bb6aa9997ae2aa6d9233fbfe1e86ef94bdb95a22064d27f9a54b0b59f887b7526252e3693bdbb86ac57bc", 0x10}, 0x48, 0xfffffffffffffff8) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r4, &(0x7f0000000580)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f00000005c0)) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001700)={&(0x7f0000000b40)={0xbac, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3ff, 0x1f, 0x61, 0x5}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}, {{0x8}, {0x15c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x78}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x240, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x81, 0x2, 0x5, 0x1}, {0x6, 0x9, 0x2, 0x8}, {0x5, 0x7, 0x3a, 0x101}, {0x7, 0x3f, 0x1f, 0x8001}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf9}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xfff, 0x8e, 0x0, 0x80000}, {0x90a, 0x4, 0x3, 0x401}, {0x2, 0x0, 0x0, 0x6}, {0x8, 0x98, 0xb1, 0x3f}, {0x6, 0x8, 0x3, 0x1}, {0x200, 0x4, 0x26, 0x5}, {0x3fd0, 0xea, 0x3, 0x5}, {0x7fff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb1}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0xbac}, 0x1, 0x0, 0x0, 0x7d197e60d7baa84e}, 0x0) 11:40:24 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) r2 = socket(0x5, 0x6, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000001c0)=0x5, 0x4) lseek(r2, 0x101, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000380)={0x53, ""/83}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40202000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008014}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r3) lseek(r3, 0x401, 0x1) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x6f, 0x35, 0x32, 0x63, 0x61, 0x64, 0x32, 0x62, 0x64, 0x66, 0x36, 0x66, 0x63, 0x35, 0x62, 0x33]}, &(0x7f00000005c0)={0x0, "93a50131676e756fda7c7c01fab9807b141083bc40a0133e815d522c9bb9dbaa59b1dca7c47ce0dba49de5538520cc00d95b7f94fa0f54f5b5d37a651e411488", 0x32}, 0x48, r0) r4 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r4, 0x0, &(0x7f0000000740)='(]!\x00') 11:40:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0xd9, ""/217}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000240)=0x7) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000280)=0x8001) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000340)=r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffff801}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r6, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f84}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x40885) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x606d01, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r7, 0x2287, &(0x7f00000006c0)=0xffff) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000700)) connect$bt_l2cap(r3, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:40:24 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r2 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r2, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000500)=0x8, 0x4) getsockname(r1, &(0x7f0000000540)=@ieee802154={0x24, @long}, &(0x7f00000005c0)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000600)={0x70, 0x20, 0xce1b, 0x6, 0x80, 0x40, 0xfb8c}, 0xc) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/bus/i2c', 0x1, 0x24) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000780)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000800)) r8 = accept4$bt_l2cap(r3, &(0x7f0000000840)={0x1f, 0x0, @none}, &(0x7f0000000880)=0xe, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc5}, 0x804) 11:40:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000000900)={0xc80, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x298, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5fd67367}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfd7f}}, {0x8, 0x6, r5}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x5, 0x40, 0x3}, {0x6, 0x40, 0xc7, 0xffffffff}, {0x2, 0x68, 0x3f, 0xf76}, {0x6e16, 0x1, 0xff, 0x8}, {0x7ff, 0x59, 0x8d, 0x80000001}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x3, 0x7}, {0xad9, 0x5, 0xe, 0xffffffff}, {0x5, 0x5, 0x5, 0x2}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6c, 0x3, 0x8, 0x9}, {0x9, 0x4, 0xc0, 0x4}, {0x7, 0x81, 0x4b, 0x5}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8b08, 0x7f, 0x0, 0xd4}, {0x0, 0x4, 0x3, 0x5}, {0x8, 0x6, 0x1, 0x3}, {0x3, 0xeb, 0x6, 0x6}, {0xc79, 0x52, 0x75, 0xfffffff7}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x575890b2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0x3, 0x1, 0x8000}]}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x361}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0xc80}, 0x1, 0x0, 0x0, 0x24004000}, 0x95) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001600)={0x0, 0x2, r0, 0x20}) r16 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r16, 0x810c9365, &(0x7f0000001680)={{0xff, 0x2}, 0x100, './file0\x00'}) 11:40:24 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x0, 0x0, @d}, 0x18, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x27}}, @FOU_ATTR_AF={0x5, 0x2, 0x1e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x3c}}, 0x4000) add_key$fscrypt_provisioning(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)={0x1, 0x0, @c}, 0x29, r1) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, r1) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) add_key$fscrypt_provisioning(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)={0x2, 0x0, @auto=[0x20]}, 0x9, r3) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x32, 0x65, 0x39, 0x30, 0x30, 0x64, 0x30, 0x66, 0x34, 0x66, 0x63, 0x32, 0x35, 0x30, 0x62]}, &(0x7f0000000880)={0x0, "5a8af73ba8253bbeddacdf8fa98d43c7981f1f64e710fb1d2f98ada1a292b4daf45d9ce9c52c92d4c30348e5595e5ae61dccc46303e7c46345694326b3da6bb5", 0x2d}, 0x48, r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x3}, 0x0, 0x0, r5) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000a00), r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000bc0)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, r7, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:40:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x20, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x1) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x38, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x41) 11:40:24 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x240000d1) syz_io_uring_setup(0x75e5, &(0x7f0000001bc0)={0x0, 0xfc00, 0x0, 0x0, 0x2a, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001c40), &(0x7f0000001c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001cc0)={0x2, {{0xa, 0x4e23, 0xffff, @loopback, 0x5}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x3}}}, 0x108) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ec0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x4c, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbb23}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffff81}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000880) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) 11:40:24 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r1) r2 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = accept4(r2, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80, 0x1000) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x24}}, 0x4040810) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000003c0)={0x0, 0x8, 0xffffff00}) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x34, 0x64, 0x33, 0x64, 0x61, 0x35, 0x37, 0x61, 0x64, 0x37, 0x32, 0x31, 0x32, 0x36, 0x35]}, &(0x7f0000000480)={0x0, "afea76716a6997568fa47d9ea46c2c84e27f4f7ba22bb6aa9997ae2aa6d9233fbfe1e86ef94bdb95a22064d27f9a54b0b59f887b7526252e3693bdbb86ac57bc", 0x10}, 0x48, 0xfffffffffffffff8) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r4, &(0x7f0000000580)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f00000005c0)) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001700)={&(0x7f0000000b40)={0xbac, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x3ff, 0x1f, 0x61, 0x5}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}, {{0x8}, {0x15c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x78}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x240, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x81, 0x2, 0x5, 0x1}, {0x6, 0x9, 0x2, 0x8}, {0x5, 0x7, 0x3a, 0x101}, {0x7, 0x3f, 0x1f, 0x8001}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf9}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xfff, 0x8e, 0x0, 0x80000}, {0x90a, 0x4, 0x3, 0x401}, {0x2, 0x0, 0x0, 0x6}, {0x8, 0x98, 0xb1, 0x3f}, {0x6, 0x8, 0x3, 0x1}, {0x200, 0x4, 0x26, 0x5}, {0x3fd0, 0xea, 0x3, 0x5}, {0x7fff}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb1}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0xbac}, 0x1, 0x0, 0x0, 0x7d197e60d7baa84e}, 0x0) 11:40:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x20, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x1) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 11:40:24 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r2 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r2, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000500)=0x8, 0x4) getsockname(r1, &(0x7f0000000540)=@ieee802154={0x24, @long}, &(0x7f00000005c0)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000600)={0x70, 0x20, 0xce1b, 0x6, 0x80, 0x40, 0xfb8c}, 0xc) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/bus/i2c', 0x1, 0x24) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000780)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000800)) r8 = accept4$bt_l2cap(r3, &(0x7f0000000840)={0x1f, 0x0, @none}, &(0x7f0000000880)=0xe, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 11:40:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0xd9, ""/217}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000240)=0x7) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000280)=0x8001) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000340)=r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffff801}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r6, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f84}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x40885) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x606d01, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r7, 0x2287, &(0x7f00000006c0)=0xffff) connect$bt_l2cap(r3, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:40:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x20, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x1) 11:40:24 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x240000d1) syz_io_uring_setup(0x75e5, &(0x7f0000001bc0)={0x0, 0xfc00, 0x0, 0x0, 0x2a, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001c40), &(0x7f0000001c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001cc0)={0x2, {{0xa, 0x4e23, 0xffff, @loopback, 0x5}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x3}}}, 0x108) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ec0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x4c, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xbb23}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffffff81}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000880) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:40:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000000900)={0xc80, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x298, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5fd67367}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfd7f}}, {0x8, 0x6, r5}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x5, 0x40, 0x3}, {0x6, 0x40, 0xc7, 0xffffffff}, {0x2, 0x68, 0x3f, 0xf76}, {0x6e16, 0x1, 0xff, 0x8}, {0x7ff, 0x59, 0x8d, 0x80000001}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x3, 0x7}, {0xad9, 0x5, 0xe, 0xffffffff}, {0x5, 0x5, 0x5, 0x2}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6c, 0x3, 0x8, 0x9}, {0x9, 0x4, 0xc0, 0x4}, {0x7, 0x81, 0x4b, 0x5}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8b08, 0x7f, 0x0, 0xd4}, {0x0, 0x4, 0x3, 0x5}, {0x8, 0x6, 0x1, 0x3}, {0x3, 0xeb, 0x6, 0x6}, {0xc79, 0x52, 0x75, 0xfffffff7}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x575890b2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0x3, 0x1, 0x8000}]}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x361}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0xc80}, 0x1, 0x0, 0x0, 0x24004000}, 0x95) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001600)={0x0, 0x2, r0, 0x20}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:40:24 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r1) r2 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = accept4(r2, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80, 0x1000) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x24}}, 0x4040810) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000003c0)={0x0, 0x8, 0xffffff00}) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x34, 0x64, 0x33, 0x64, 0x61, 0x35, 0x37, 0x61, 0x64, 0x37, 0x32, 0x31, 0x32, 0x36, 0x35]}, &(0x7f0000000480)={0x0, "afea76716a6997568fa47d9ea46c2c84e27f4f7ba22bb6aa9997ae2aa6d9233fbfe1e86ef94bdb95a22064d27f9a54b0b59f887b7526252e3693bdbb86ac57bc", 0x10}, 0x48, 0xfffffffffffffff8) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r4, &(0x7f0000000580)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f00000005c0)) 11:40:24 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) r1 = socket(0x5, 0x6, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f00000001c0)=0x5, 0x4) lseek(r1, 0x101, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000380)={0x53, ""/83}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40202000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008014}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r2) lseek(r2, 0x401, 0x1) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x6f, 0x35, 0x32, 0x63, 0x61, 0x64, 0x32, 0x62, 0x64, 0x66, 0x36, 0x66, 0x63, 0x35, 0x62, 0x33]}, &(0x7f00000005c0)={0x0, "93a50131676e756fda7c7c01fab9807b141083bc40a0133e815d522c9bb9dbaa59b1dca7c47ce0dba49de5538520cc00d95b7f94fa0f54f5b5d37a651e411488", 0x32}, 0x48, r0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000740)='(]!\x00') 11:40:24 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x0, 0x0, @d}, 0x18, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x27}}, @FOU_ATTR_AF={0x5, 0x2, 0x1e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x3c}}, 0x4000) add_key$fscrypt_provisioning(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)={0x1, 0x0, @c}, 0x29, r1) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, r1) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) add_key$fscrypt_provisioning(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)={0x2, 0x0, @auto=[0x20]}, 0x9, r3) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x32, 0x65, 0x39, 0x30, 0x30, 0x64, 0x30, 0x66, 0x34, 0x66, 0x63, 0x32, 0x35, 0x30, 0x62]}, &(0x7f0000000880)={0x0, "5a8af73ba8253bbeddacdf8fa98d43c7981f1f64e710fb1d2f98ada1a292b4daf45d9ce9c52c92d4c30348e5595e5ae61dccc46303e7c46345694326b3da6bb5", 0x2d}, 0x48, r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x3}, 0x0, 0x0, r5) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000a00), r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000bc0)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, r7, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:40:33 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x0, 0x0, @d}, 0x18, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x27}}, @FOU_ATTR_AF={0x5, 0x2, 0x1e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x3c}}, 0x4000) add_key$fscrypt_provisioning(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)={0x1, 0x0, @c}, 0x29, r1) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, r1) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) add_key$fscrypt_provisioning(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)={0x2, 0x0, @auto=[0x20]}, 0x9, r3) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x32, 0x65, 0x39, 0x30, 0x30, 0x64, 0x30, 0x66, 0x34, 0x66, 0x63, 0x32, 0x35, 0x30, 0x62]}, &(0x7f0000000880)={0x0, "5a8af73ba8253bbeddacdf8fa98d43c7981f1f64e710fb1d2f98ada1a292b4daf45d9ce9c52c92d4c30348e5595e5ae61dccc46303e7c46345694326b3da6bb5", 0x2d}, 0x48, r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x3}, 0x0, 0x0, r5) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000a00), r4) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, r7, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:40:33 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) r1 = socket(0x5, 0x6, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f00000001c0)=0x5, 0x4) lseek(r1, 0x101, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000380)={0x53, ""/83}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40202000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008014}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r2) lseek(r2, 0x401, 0x1) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x6f, 0x35, 0x32, 0x63, 0x61, 0x64, 0x32, 0x62, 0x64, 0x66, 0x36, 0x66, 0x63, 0x35, 0x62, 0x33]}, &(0x7f00000005c0)={0x0, "93a50131676e756fda7c7c01fab9807b141083bc40a0133e815d522c9bb9dbaa59b1dca7c47ce0dba49de5538520cc00d95b7f94fa0f54f5b5d37a651e411488", 0x32}, 0x48, r0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000740)='(]!\x00') 11:40:33 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x240000d1) syz_io_uring_setup(0x75e5, &(0x7f0000001bc0)={0x0, 0xfc00, 0x0, 0x0, 0x2a, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001c40), &(0x7f0000001c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001cc0)={0x2, {{0xa, 0x4e23, 0xffff, @loopback, 0x5}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x3}}}, 0x108) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000001ec0), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:40:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 11:40:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0xd9, ""/217}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000240)=0x7) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000280)=0x8001) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000340)=r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffff801}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r6, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f84}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x40885) openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x606d01, 0x0) connect$bt_l2cap(r3, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:40:33 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r1) r2 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = accept4(r2, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80, 0x1000) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x24}}, 0x4040810) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000003c0)={0x0, 0x8, 0xffffff00}) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x34, 0x64, 0x33, 0x64, 0x61, 0x35, 0x37, 0x61, 0x64, 0x37, 0x32, 0x31, 0x32, 0x36, 0x35]}, &(0x7f0000000480)={0x0, "afea76716a6997568fa47d9ea46c2c84e27f4f7ba22bb6aa9997ae2aa6d9233fbfe1e86ef94bdb95a22064d27f9a54b0b59f887b7526252e3693bdbb86ac57bc", 0x10}, 0x48, 0xfffffffffffffff8) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r4, &(0x7f0000000580)) 11:40:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x5) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000015c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000000900)={0xc80, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x298, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5fd67367}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfd7f}}, {0x8, 0x6, r5}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x5, 0x40, 0x3}, {0x6, 0x40, 0xc7, 0xffffffff}, {0x2, 0x68, 0x3f, 0xf76}, {0x6e16, 0x1, 0xff, 0x8}, {0x7ff, 0x59, 0x8d, 0x80000001}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x1cc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x3, 0x7}, {0xad9, 0x5, 0xe, 0xffffffff}, {0x5, 0x5, 0x5, 0x2}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6c, 0x3, 0x8, 0x9}, {0x9, 0x4, 0xc0, 0x4}, {0x7, 0x81, 0x4b, 0x5}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8b08, 0x7f, 0x0, 0xd4}, {0x0, 0x4, 0x3, 0x5}, {0x8, 0x6, 0x1, 0x3}, {0x3, 0xeb, 0x6, 0x6}, {0xc79, 0x52, 0x75, 0xfffffff7}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x575890b2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7, 0x3, 0x1, 0x8000}]}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x361}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0xc80}, 0x1, 0x0, 0x0, 0x24004000}, 0x95) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:40:33 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r2 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r2, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000500)=0x8, 0x4) getsockname(r1, &(0x7f0000000540)=@ieee802154={0x24, @long}, &(0x7f00000005c0)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000600)={0x70, 0x20, 0xce1b, 0x6, 0x80, 0x40, 0xfb8c}, 0xc) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/bus/i2c', 0x1, 0x24) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000780)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000800)) r8 = accept4$bt_l2cap(r3, &(0x7f0000000840)={0x1f, 0x0, @none}, &(0x7f0000000880)=0xe, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 11:40:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:40:33 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r2 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r2, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000500)=0x8, 0x4) getsockname(r1, &(0x7f0000000540)=@ieee802154={0x24, @long}, &(0x7f00000005c0)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000600)={0x70, 0x20, 0xce1b, 0x6, 0x80, 0x40, 0xfb8c}, 0xc) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/bus/i2c', 0x1, 0x24) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000780)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000800)) r8 = accept4$bt_l2cap(r3, &(0x7f0000000840)={0x1f, 0x0, @none}, &(0x7f0000000880)=0xe, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000008c0)={'batadv_slave_0\x00'}) 11:40:33 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:40:33 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) r1 = socket(0x5, 0x6, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f00000001c0)=0x5, 0x4) lseek(r1, 0x101, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000380)={0x53, ""/83}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40202000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008014}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r2) lseek(r2, 0x401, 0x1) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x6f, 0x35, 0x32, 0x63, 0x61, 0x64, 0x32, 0x62, 0x64, 0x66, 0x36, 0x66, 0x63, 0x35, 0x62, 0x33]}, &(0x7f00000005c0)={0x0, "93a50131676e756fda7c7c01fab9807b141083bc40a0133e815d522c9bb9dbaa59b1dca7c47ce0dba49de5538520cc00d95b7f94fa0f54f5b5d37a651e411488", 0x32}, 0x48, r0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000740)='(]!\x00') 11:40:41 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r1) r2 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = accept4(r2, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80, 0x1000) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x24}}, 0x4040810) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000003c0)={0x0, 0x8, 0xffffff00}) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x34, 0x64, 0x33, 0x64, 0x61, 0x35, 0x37, 0x61, 0x64, 0x37, 0x32, 0x31, 0x32, 0x36, 0x35]}, &(0x7f0000000480)={0x0, "afea76716a6997568fa47d9ea46c2c84e27f4f7ba22bb6aa9997ae2aa6d9233fbfe1e86ef94bdb95a22064d27f9a54b0b59f887b7526252e3693bdbb86ac57bc", 0x10}, 0x48, 0xfffffffffffffff8) socket$inet6_tcp(0xa, 0x1, 0x0) timer_gettime(0x0, &(0x7f0000000580)) 11:40:41 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) r2 = socket(0x5, 0x6, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000001c0)=0x5, 0x4) lseek(r2, 0x101, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000380)={0x53, ""/83}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40202000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008014}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r3) lseek(r3, 0x401, 0x1) r4 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r4, 0x0, &(0x7f0000000740)='(]!\x00') 11:40:41 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:40:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:40:41 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x0, 0x0, @d}, 0x18, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x27}}, @FOU_ATTR_AF={0x5, 0x2, 0x1e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x3c}}, 0x4000) add_key$fscrypt_provisioning(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)={0x1, 0x0, @c}, 0x29, r1) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, r1) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) add_key$fscrypt_provisioning(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)={0x2, 0x0, @auto=[0x20]}, 0x9, r3) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x32, 0x65, 0x39, 0x30, 0x30, 0x64, 0x30, 0x66, 0x34, 0x66, 0x63, 0x32, 0x35, 0x30, 0x62]}, &(0x7f0000000880)={0x0, "5a8af73ba8253bbeddacdf8fa98d43c7981f1f64e710fb1d2f98ada1a292b4daf45d9ce9c52c92d4c30348e5595e5ae61dccc46303e7c46345694326b3da6bb5", 0x2d}, 0x48, r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x3}, 0x0, 0x0, r5) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:40:41 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x240000d1) syz_io_uring_setup(0x75e5, &(0x7f0000001bc0)={0x0, 0xfc00, 0x0, 0x0, 0x2a, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001c40), &(0x7f0000001c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001cc0)={0x2, {{0xa, 0x4e23, 0xffff, @loopback, 0x5}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x3}}}, 0x108) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000001ec0), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:40:41 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r2 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r2, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000500)=0x8, 0x4) getsockname(r1, &(0x7f0000000540)=@ieee802154={0x24, @long}, &(0x7f00000005c0)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000600)={0x70, 0x20, 0xce1b, 0x6, 0x80, 0x40, 0xfb8c}, 0xc) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/bus/i2c', 0x1, 0x24) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000780)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000800)) accept4$bt_l2cap(r3, &(0x7f0000000840)={0x1f, 0x0, @none}, &(0x7f0000000880)=0xe, 0x80000) 11:40:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0xd9, ""/217}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000240)=0x7) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000280)=0x8001) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000340)=r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffff801}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r6, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f84}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x40885) connect$bt_l2cap(r3, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:40:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:40:41 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r1) r2 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = accept4(r2, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80, 0x1000) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x24}}, 0x4040810) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000003c0)={0x0, 0x8, 0xffffff00}) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x34, 0x64, 0x33, 0x64, 0x61, 0x35, 0x37, 0x61, 0x64, 0x37, 0x32, 0x31, 0x32, 0x36, 0x35]}, &(0x7f0000000480)={0x0, "afea76716a6997568fa47d9ea46c2c84e27f4f7ba22bb6aa9997ae2aa6d9233fbfe1e86ef94bdb95a22064d27f9a54b0b59f887b7526252e3693bdbb86ac57bc", 0x10}, 0x48, 0xfffffffffffffff8) socket$inet6_tcp(0xa, 0x1, 0x0) timer_gettime(0x0, &(0x7f0000000580)) 11:40:41 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r2 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r2, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000500)=0x8, 0x4) getsockname(r1, &(0x7f0000000540)=@ieee802154={0x24, @long}, &(0x7f00000005c0)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000600)={0x70, 0x20, 0xce1b, 0x6, 0x80, 0x40, 0xfb8c}, 0xc) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/bus/i2c', 0x1, 0x24) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000780)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000800)) 11:40:41 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x0, 0x0, @d}, 0x18, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x27}}, @FOU_ATTR_AF={0x5, 0x2, 0x1e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x3c}}, 0x4000) add_key$fscrypt_provisioning(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)={0x1, 0x0, @c}, 0x29, r1) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, r1) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) add_key$fscrypt_provisioning(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)={0x2, 0x0, @auto=[0x20]}, 0x9, r3) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x32, 0x65, 0x39, 0x30, 0x30, 0x64, 0x30, 0x66, 0x34, 0x66, 0x63, 0x32, 0x35, 0x30, 0x62]}, &(0x7f0000000880)={0x0, "5a8af73ba8253bbeddacdf8fa98d43c7981f1f64e710fb1d2f98ada1a292b4daf45d9ce9c52c92d4c30348e5595e5ae61dccc46303e7c46345694326b3da6bb5", 0x2d}, 0x48, r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:40:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:40:41 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r2 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r2, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000500)=0x8, 0x4) getsockname(r1, &(0x7f0000000540)=@ieee802154={0x24, @long}, &(0x7f00000005c0)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000600)={0x70, 0x20, 0xce1b, 0x6, 0x80, 0x40, 0xfb8c}, 0xc) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/bus/i2c', 0x1, 0x24) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000780)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:40:41 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x240000d1) syz_io_uring_setup(0x75e5, &(0x7f0000001bc0)={0x0, 0xfc00, 0x0, 0x0, 0x2a, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001c40), &(0x7f0000001c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001cc0)={0x2, {{0xa, 0x4e23, 0xffff, @loopback, 0x5}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x3}}}, 0x108) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:40:49 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x240000d1) syz_io_uring_setup(0x75e5, &(0x7f0000001bc0)={0x0, 0xfc00, 0x0, 0x0, 0x2a, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001c40), &(0x7f0000001c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001cc0)={0x2, {{0xa, 0x4e23, 0xffff, @loopback, 0x5}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x3}}}, 0x108) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:40:49 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x0, 0x0, @d}, 0x18, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x27}}, @FOU_ATTR_AF={0x5, 0x2, 0x1e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x3c}}, 0x4000) add_key$fscrypt_provisioning(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)={0x1, 0x0, @c}, 0x29, r1) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, r1) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) add_key$fscrypt_provisioning(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)={0x2, 0x0, @auto=[0x20]}, 0x9, r3) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x32, 0x65, 0x39, 0x30, 0x30, 0x64, 0x30, 0x66, 0x34, 0x66, 0x63, 0x32, 0x35, 0x30, 0x62]}, &(0x7f0000000880)={0x0, "5a8af73ba8253bbeddacdf8fa98d43c7981f1f64e710fb1d2f98ada1a292b4daf45d9ce9c52c92d4c30348e5595e5ae61dccc46303e7c46345694326b3da6bb5", 0x2d}, 0x48, r0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:40:49 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r2 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r2, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000500)=0x8, 0x4) getsockname(r1, &(0x7f0000000540)=@ieee802154={0x24, @long}, &(0x7f00000005c0)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000600)={0x70, 0x20, 0xce1b, 0x6, 0x80, 0x40, 0xfb8c}, 0xc) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/bus/i2c', 0x1, 0x24) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:40:49 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) r2 = socket(0x5, 0x6, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000001c0)=0x5, 0x4) lseek(r2, 0x101, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000380)={0x53, ""/83}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40202000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008014}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r3) r4 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r4, 0x0, &(0x7f0000000740)='(]!\x00') 11:40:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x4800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:40:49 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:40:49 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r1) r2 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = accept4(r2, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80, 0x1000) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x24}}, 0x4040810) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000003c0)={0x0, 0x8, 0xffffff00}) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x34, 0x64, 0x33, 0x64, 0x61, 0x35, 0x37, 0x61, 0x64, 0x37, 0x32, 0x31, 0x32, 0x36, 0x35]}, &(0x7f0000000480)={0x0, "afea76716a6997568fa47d9ea46c2c84e27f4f7ba22bb6aa9997ae2aa6d9233fbfe1e86ef94bdb95a22064d27f9a54b0b59f887b7526252e3693bdbb86ac57bc", 0x10}, 0x48, 0xfffffffffffffff8) socket$inet6_tcp(0xa, 0x1, 0x0) timer_gettime(0x0, &(0x7f0000000580)) 11:40:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0xd9, ""/217}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000240)=0x7) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000280)=0x8001) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000340)=r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffff801}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80) connect$bt_l2cap(r3, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:40:50 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x0, 0x0, @d}, 0x18, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x27}}, @FOU_ATTR_AF={0x5, 0x2, 0x1e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x3c}}, 0x4000) add_key$fscrypt_provisioning(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)={0x1, 0x0, @c}, 0x29, r1) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, r1) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) add_key$fscrypt_provisioning(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)={0x2, 0x0, @auto=[0x20]}, 0x9, r3) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:40:50 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r2 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r2, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000500)=0x8, 0x4) getsockname(r1, &(0x7f0000000540)=@ieee802154={0x24, @long}, &(0x7f00000005c0)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000600)={0x70, 0x20, 0xce1b, 0x6, 0x80, 0x40, 0xfb8c}, 0xc) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/bus/i2c', 0x1, 0x24) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:40:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x4800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:40:50 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r1) r2 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = accept4(r2, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80, 0x1000) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x24}}, 0x4040810) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000003c0)={0x0, 0x8, 0xffffff00}) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x34, 0x64, 0x33, 0x64, 0x61, 0x35, 0x37, 0x61, 0x64, 0x37, 0x32, 0x31, 0x32, 0x36, 0x35]}, &(0x7f0000000480)={0x0, "afea76716a6997568fa47d9ea46c2c84e27f4f7ba22bb6aa9997ae2aa6d9233fbfe1e86ef94bdb95a22064d27f9a54b0b59f887b7526252e3693bdbb86ac57bc", 0x10}, 0x48, 0xfffffffffffffff8) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r4, &(0x7f0000000580)) 11:40:50 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:40:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x4800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:40:50 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x0, 0x0, @d}, 0x18, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x27}}, @FOU_ATTR_AF={0x5, 0x2, 0x1e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x3c}}, 0x4000) add_key$fscrypt_provisioning(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)={0x1, 0x0, @c}, 0x29, r1) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, r1) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:40:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0xd9, ""/217}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000240)=0x7) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000280)=0x8001) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000340)=r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) connect$bt_l2cap(r3, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:40:58 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) r2 = socket(0x5, 0x6, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000001c0)=0x5, 0x4) lseek(r2, 0x101, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000380)={0x53, ""/83}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40202000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008014}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r4, 0x0, &(0x7f0000000740)='(]!\x00') 11:40:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x4800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:40:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0xd9, ""/217}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000240)=0x7) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000280)=0x8001) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000340)=r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000003c0)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) connect$bt_l2cap(r3, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:40:58 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r1) r2 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = accept4(r2, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80, 0x1000) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x24}}, 0x4040810) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000003c0)={0x0, 0x8, 0xffffff00}) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r4, &(0x7f0000000580)) 11:40:58 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x0, 0x0, @d}, 0x18, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x27}}, @FOU_ATTR_AF={0x5, 0x2, 0x1e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x3c}}, 0x4000) add_key$fscrypt_provisioning(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)={0x1, 0x0, @c}, 0x29, r1) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, r1) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:40:58 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r2 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r2, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000500)=0x8, 0x4) getsockname(r1, &(0x7f0000000540)=@ieee802154={0x24, @long}, &(0x7f00000005c0)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000600)={0x70, 0x20, 0xce1b, 0x6, 0x80, 0x40, 0xfb8c}, 0xc) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/bus/i2c', 0x1, 0x24) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:40:58 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x240000d1) syz_io_uring_setup(0x75e5, &(0x7f0000001bc0)={0x0, 0xfc00, 0x0, 0x0, 0x2a, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001c40), &(0x7f0000001c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001cc0)={0x2, {{0xa, 0x4e23, 0xffff, @loopback, 0x5}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x3}}}, 0x108) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:40:58 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:40:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200440d0}, 0x4800) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:40:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0xd9, ""/217}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000240)=0x7) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000280)=0x8001) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000340)=r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'}) connect$bt_l2cap(r3, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:40:58 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r2 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r2, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000500)=0x8, 0x4) getsockname(r1, &(0x7f0000000540)=@ieee802154={0x24, @long}, &(0x7f00000005c0)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000600)={0x70, 0x20, 0xce1b, 0x6, 0x80, 0x40, 0xfb8c}, 0xc) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0x40000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:40:58 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x0, 0x0, @d}, 0x18, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x27}}, @FOU_ATTR_AF={0x5, 0x2, 0x1e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x3c}}, 0x4000) add_key$fscrypt_provisioning(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000600)={0x1, 0x0, @c}, 0x29, r1) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:40:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r3) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:40:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:40:58 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r2 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r2, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000500)=0x8, 0x4) getsockname(r1, &(0x7f0000000540)=@ieee802154={0x24, @long}, &(0x7f00000005c0)=0x80) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000600)={0x70, 0x20, 0xce1b, 0x6, 0x80, 0x40, 0xfb8c}, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:40:58 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r1) r2 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = accept4(r2, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80, 0x1000) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x24}}, 0x4040810) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r4, &(0x7f0000000580)) 11:40:58 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) r2 = socket(0x5, 0x6, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000001c0)=0x5, 0x4) lseek(r2, 0x101, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000380)={0x53, ""/83}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f0000000740)='(]!\x00') 11:40:58 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x0, 0x0, @d}, 0x18, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x27}}, @FOU_ATTR_AF={0x5, 0x2, 0x1e}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x3c}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:40:58 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:40:58 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x240000d1) syz_io_uring_setup(0x75e5, &(0x7f0000001bc0)={0x0, 0xfc00, 0x0, 0x0, 0x2a, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001c40), &(0x7f0000001c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001cc0)={0x2, {{0xa, 0x4e23, 0xffff, @loopback, 0x5}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x3}}}, 0x108) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:40:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0xd9, ""/217}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000240)=0x7) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000280)=0x8001) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000340)=r4) connect$bt_l2cap(r3, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:40:58 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r2 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r2, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000380)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000500)=0x8, 0x4) getsockname(r1, &(0x7f0000000540)=@ieee802154={0x24, @long}, &(0x7f00000005c0)=0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:41:05 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:41:05 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r1 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r1, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000500)=0x8, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:41:05 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) r2 = socket(0x5, 0x6, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000001c0)=0x5, 0x4) lseek(r2, 0x101, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000380)={0x53, ""/83}) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f0000000740)='(]!\x00') 11:41:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0xd9, ""/217}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000240)=0x7) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000280)=0x8001) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)) connect$bt_l2cap(r3, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:41:05 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x240000d1) syz_io_uring_setup(0x75e5, &(0x7f0000001bc0)={0x0, 0xfc00, 0x0, 0x0, 0x2a, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001c40), &(0x7f0000001c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001cc0)={0x2, {{0xa, 0x4e23, 0xffff, @loopback, 0x5}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x3}}}, 0x108) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:41:05 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x0, 0x0, @d}, 0x18, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:41:05 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:41:05 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r1) r2 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) accept4(r2, &(0x7f0000000200)=@isdn, &(0x7f0000000280)=0x80, 0x1000) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r3, &(0x7f0000000580)) 11:41:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0xd9, ""/217}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000240)=0x7) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000280)=0x8001) connect$bt_l2cap(r3, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:41:05 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x0, 0x0, @d}, 0x18, r3) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:41:05 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) r2 = socket(0x5, 0x6, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000001c0)=0x5, 0x4) lseek(r2, 0x101, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000380)={0x53, ""/83}) r3 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f0000000740)='(]!\x00') 11:41:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0xd9, ""/217}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000240)=0x7) connect$bt_l2cap(r3, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:41:13 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) r2 = socket(0x5, 0x6, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000001c0)=0x5, 0x4) lseek(r2, 0x101, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) r3 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f0000000740)='(]!\x00') 11:41:13 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x240000d1) syz_io_uring_setup(0x75e5, &(0x7f0000001bc0)={0x0, 0xfc00, 0x0, 0x0, 0x2a, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001c40), &(0x7f0000001c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001cc0)={0x2, {{0xa, 0x4e23, 0xffff, @loopback, 0x5}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x3}}}, 0x108) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:41:13 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r1) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r2, &(0x7f0000000580)) 11:41:13 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:41:13 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x0, 0x0, @d}, 0x18, r3) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:41:13 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r1 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r1, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x11) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:41:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:41:13 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$fscrypt_provisioning(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)={0x0, 0x0, @d}, 0x18, r3) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:41:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:41:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0xd9, ""/217}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x301000, 0x0) connect$bt_l2cap(r3, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:41:13 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r1 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r1, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:41:13 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:41:13 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r1) socket$packet(0x11, 0x2, 0x300) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r2, &(0x7f0000000580)) 11:41:13 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:41:13 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x240000d1) syz_io_uring_setup(0x75e5, &(0x7f0000001bc0)={0x0, 0xfc00, 0x0, 0x0, 0x2a, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001c40), &(0x7f0000001c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001cc0)={0x2, {{0xa, 0x4e23, 0xffff, @loopback, 0x5}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x3}}}, 0x108) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:41:13 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) r2 = socket(0x5, 0x6, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000001c0)=0x5, 0x4) lseek(r2, 0x101, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f0000000740)='(]!\x00') 11:41:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0xd9, ""/217}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:41:21 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x240000d1) syz_io_uring_setup(0x75e5, &(0x7f0000001bc0)={0x0, 0xfc00, 0x0, 0x0, 0x2a, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001c40), &(0x7f0000001c80)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000001cc0)={0x2, {{0xa, 0x4e23, 0xffff, @loopback, 0x5}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x3}}}, 0x108) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:41:21 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r1 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r1, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:41:21 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)={0x0, 0x0, @auto=[0x14, 0x23]}, 0xa, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:41:21 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r1) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r2, &(0x7f0000000580)) 11:41:21 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) r2 = socket(0x5, 0x6, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f00000001c0)=0x5, 0x4) r3 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f0000000740)='(]!\x00') 11:41:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) pidfd_getfd(0xffffffffffffffff, r0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:41:21 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:41:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:41:21 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r1, &(0x7f0000000580)) 11:41:21 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "44e52c2ad0d5489e29c750f21b7a514ee6e0a67703d8f5482fc828293db589faec4954984ece04d5a7a4e597b5bf6aa1ec046a6893b0c85fe5746763fd3dab4e", 0x2d}, 0x48, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:41:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:41:21 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r1 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r1, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:41:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48051}, 0x4880) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:41:21 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_settime(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r1, &(0x7f0000000580)) [ 187.858527] Bluetooth: hci0: command 0x0406 tx timeout [ 187.859823] Bluetooth: hci3: command 0x0406 tx timeout [ 187.865114] Bluetooth: hci7: command 0x0406 tx timeout [ 187.865477] Bluetooth: hci4: command 0x0406 tx timeout [ 187.866597] Bluetooth: hci6: command 0x0406 tx timeout [ 187.866699] Bluetooth: hci5: command 0x0406 tx timeout [ 187.867034] Bluetooth: hci2: command 0x0406 tx timeout [ 187.868313] Bluetooth: hci1: command 0x0406 tx timeout 11:41:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x400040) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:41:29 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, &(0x7f0000000040)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r1, &(0x7f0000000580)) 11:41:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r2) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:41:29 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:41:29 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) r2 = socket(0x5, 0x6, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) r3 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r3, 0x0, &(0x7f0000000740)='(]!\x00') 11:41:29 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x240000d1) syz_io_uring_setup(0x75e5, &(0x7f0000001bc0)={0x0, 0xfc00, 0x0, 0x0, 0x2a, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001c40), &(0x7f0000001c80)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:41:29 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r1, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:41:29 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r1 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r1, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x103081, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:41:30 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:41:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff0da2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r2) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:41:30 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:41:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:41:30 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r1 = accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) bind(r1, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0xa3}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:41:30 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) socket$packet(0x11, 0x3, 0x300) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r0, &(0x7f0000000580)) 11:41:30 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b95fd4d270b7ba9a20bd1fd76650aaaf3022d6283647cde819d91e9049526e438dff7df8aa4e6f66a0cfcd96180106e747de7ce1a71a070aa2728509b4404469071bb7872795cc49f7414db34cce7591efafceffcb004972046530e76caf46853bd67d757c9ec30e1ff96491d2e1dca8e3d7", 0x72, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:41:30 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x240000d1) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:41:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040801) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r2) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:41:30 executing program 0: keyctl$negate(0xd, 0x0, 0x5, 0xfffffffffffffffc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:41:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r2) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:41:30 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) socket(0x5, 0x6, 0x3) r2 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f0000000740)='(]!\x00') 11:41:38 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:41:38 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@unspec, 0xc) r2 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f0000000740)='(]!\x00') 11:41:38 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:41:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:41:38 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:41:38 executing program 4: syz_open_dev$sg(&(0x7f0000000000), 0x81, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:41:38 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_delete(0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r0, &(0x7f0000000580)) 11:41:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r1) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:41:38 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) accept4(r0, &(0x7f0000000200)=@xdp, &(0x7f0000000280)=0x80, 0x80000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:41:38 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r0, &(0x7f0000000580)) 11:41:38 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:41:38 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rw\x00'}, 0x9) r2 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f0000000740)='(]!\x00') 11:41:38 executing program 4: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x9, @none, 0xffff, 0x2}, 0xe) 11:41:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r1) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:41:46 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:41:46 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) lseek(r0, 0xff, 0x1) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:41:46 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:41:46 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:41:46 executing program 2: timer_delete(0x0) timer_gettime(0x0, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r0, &(0x7f0000000580)) 11:41:46 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f0000000740)='(]!\x00') 11:41:46 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x1, 0x2, 0x20, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, 0x1, 0x0, 0x6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:41:46 executing program 4: connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 11:41:46 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:41:46 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000051c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:41:46 executing program 2: timer_delete(0x0) timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r0, &(0x7f0000000580)) 11:41:46 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:41:46 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:41:46 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000740)='(]!\x00') 11:41:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x8000) 11:41:46 executing program 4: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f0000000740)='(]!\x00') 11:41:46 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:41:54 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) bind(r0, &(0x7f0000001980)=@pppoe={0x18, 0x0, {0x6, @remote, 'erspan0\x00'}}, 0x80) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:41:54 executing program 2: timer_create(0x0, &(0x7f0000000500)={0x0, 0xc, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_gettime(r0, &(0x7f0000000580)) 11:41:54 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:41:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x8000) 11:41:54 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000740)='(]!\x00') 11:41:54 executing program 4: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f0000000740)='(]!\x00') 11:41:54 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:41:54 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:41:54 executing program 7: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:41:54 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x100) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:41:54 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000540)=0x0) timer_gettime(r0, &(0x7f0000000580)) 11:41:54 executing program 7: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:41:54 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, 0x0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000740)='(]!\x00') 11:41:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x8000) 11:41:54 executing program 4: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f0000000740)='(]!\x00') 11:41:54 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:41:54 executing program 2: timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000580)) 11:41:54 executing program 1: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:41:54 executing program 7: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:41:54 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000740)='(]!\x00') 11:41:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:41:54 executing program 4: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r1) 11:41:54 executing program 1: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:41:54 executing program 2: timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000580)) 11:42:03 executing program 4: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, 0x0) 11:42:03 executing program 2: timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000580)) 11:42:03 executing program 1: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:42:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000051c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:42:03 executing program 5: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000740)='(]!\x00') 11:42:03 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:42:03 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000040)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:42:03 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) r1 = io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x20110, r1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:42:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000051c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:42:10 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000540)) timer_gettime(0x0, &(0x7f0000000580)) 11:42:10 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) io_uring_setup(0x5090, &(0x7f0000000800)={0x0, 0x99c, 0x4, 0x1, 0x17f, 0x0, r0}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:42:10 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000040)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:42:10 executing program 4: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, 0x0) 11:42:10 executing program 5: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000740)='(]!\x00') 11:42:10 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:42:10 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:42:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000051c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:42:10 executing program 4: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, r0) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, 0x0) 11:42:10 executing program 5: r0 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000740)='(]!\x00') 11:42:10 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:42:10 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000540)) timer_gettime(0x0, 0x0) 11:42:10 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000040)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) [ 230.269359] [ 230.269696] ===================================== [ 230.270350] WARNING: bad unlock balance detected! [ 230.270986] 6.19.0-rc5-next-20260116 #1 Not tainted [ 230.271643] ------------------------------------- [ 230.272274] syz-executor.2/4812 is trying to release lock (rcu_read_lock) at: [ 230.273237] [] __wait_on_freeing_inode+0x105/0x350 [ 230.274121] but there are no more locks to release! [ 230.275028] [ 230.275028] other info that might help us debug this: [ 230.278786] 4 locks held by syz-executor.2/4812: [ 230.280967] #0: ffff88800f73a3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 230.283284] #1: ffff88802c1b3388 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 230.284595] #2: ffff88800f73e950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 230.285761] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 230.287007] [ 230.287007] stack backtrace: [ 230.287592] CPU: 1 UID: 0 PID: 4812 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 230.287616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 230.287628] Call Trace: [ 230.287634] [ 230.287641] dump_stack_lvl+0xca/0x120 [ 230.287683] ? __wait_on_freeing_inode+0x105/0x350 [ 230.287707] print_unlock_imbalance_bug+0x118/0x130 [ 230.287732] ? __wait_on_freeing_inode+0x105/0x350 [ 230.287757] lock_release+0x1ee/0x270 [ 230.287782] __wait_on_freeing_inode+0x10a/0x350 [ 230.287807] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 230.287833] ? __pfx_var_wake_function+0x10/0x10 [ 230.287863] ? lock_is_held_type+0x9e/0x120 [ 230.287882] insert_inode_locked+0x25f/0x890 [ 230.287911] __ext4_new_inode+0x223d/0x4cd0 [ 230.287939] ? __pfx___ext4_new_inode+0x10/0x10 [ 230.287963] ? __pfx___dquot_initialize+0x10/0x10 [ 230.287994] ? __pfx_avc_has_perm+0x10/0x10 [ 230.288020] ext4_symlink+0x623/0xb40 [ 230.288051] ? __pfx_ext4_symlink+0x10/0x10 [ 230.288078] ? security_inode_permission+0x72/0xe0 [ 230.288100] vfs_symlink+0x44b/0x840 [ 230.288128] filename_symlinkat+0x158/0x440 [ 230.288152] ? __pfx_filename_symlinkat+0x10/0x10 [ 230.288175] ? strncpy_from_user+0x21b/0x2f0 [ 230.288203] __x64_sys_symlink+0x82/0x110 [ 230.288225] do_syscall_64+0xbf/0x420 [ 230.288247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.288267] RIP: 0033:0x7f826f1ad427 [ 230.288281] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 230.288299] RSP: 002b:00007ffdab735448 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 230.288317] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f826f1ad427 [ 230.288330] RDX: 00007ffdab735527 RSI: 00007f826f208019 RDI: 00007ffdab735510 [ 230.288342] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffdab7352e0 [ 230.288353] R10: 00007ffdab735197 R11: 0000000000000206 R12: 0000000000000001 [ 230.288365] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdab735510 [ 230.288382] [ 230.313960] ------------[ cut here ]------------ [ 230.314647] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.2/4812 [ 230.316115] Modules linked in: [ 230.316617] CPU: 1 UID: 0 PID: 4812 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 230.317992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 230.319142] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 230.319983] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 230.322485] RSP: 0018:ffff88800f54f9a0 EFLAGS: 00010286 [ 230.323186] RAX: 00000000ffffffff RBX: ffff888016219b80 RCX: ffffffff815660f7 [ 230.324180] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff888016219f7c [ 230.325183] RBP: ffff888016219b80 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 230.326193] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888016219b80 [ 230.327175] R13: 0000000000000001 R14: ffffffff85c0d9c0 R15: ffff88802c18b2c0 [ 230.328161] FS: 0000555576a14400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 230.329264] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.330096] CR2: 00007f826f22d542 CR3: 0000000045bbf000 CR4: 0000000000350ef0 [ 230.331087] Call Trace: [ 230.331620] [ 230.332740] __wait_on_freeing_inode+0x10f/0x350 [ 230.333910] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 230.335741] ? __pfx_var_wake_function+0x10/0x10 [ 230.337817] ? lock_is_held_type+0x9e/0x120 [ 230.339668] insert_inode_locked+0x25f/0x890 [ 230.344895] __ext4_new_inode+0x223d/0x4cd0 [ 230.350767] ? __pfx___ext4_new_inode+0x10/0x10 [ 230.352795] ? __pfx___dquot_initialize+0x10/0x10 [ 230.354050] ? __pfx_avc_has_perm+0x10/0x10 [ 230.357052] ext4_symlink+0x623/0xb40 [ 230.360783] ? __pfx_ext4_symlink+0x10/0x10 [ 230.362473] ? security_inode_permission+0x72/0xe0 [ 230.365140] vfs_symlink+0x44b/0x840 [ 230.367261] filename_symlinkat+0x158/0x440 [ 230.369139] ? __pfx_filename_symlinkat+0x10/0x10 [ 230.370394] ? strncpy_from_user+0x21b/0x2f0 [ 230.373523] __x64_sys_symlink+0x82/0x110 [ 230.374723] do_syscall_64+0xbf/0x420 [ 230.376023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.376895] RIP: 0033:0x7f826f1ad427 [ 230.377553] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 230.379924] RSP: 002b:00007ffdab735448 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 230.380940] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f826f1ad427 [ 230.381920] RDX: 00007ffdab735527 RSI: 00007f826f208019 RDI: 00007ffdab735510 [ 230.382889] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffdab7352e0 [ 230.383857] R10: 00007ffdab735197 R11: 0000000000000206 R12: 0000000000000001 [ 230.384825] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdab735510 [ 230.389066] [ 230.389373] irq event stamp: 175 [ 230.389870] hardirqs last enabled at (175): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 230.391223] hardirqs last disabled at (174): [] _raw_spin_lock_irqsave+0x53/0x60 [ 230.392507] softirqs last enabled at (170): [] kernel_fpu_end+0x59/0x70 [ 230.393704] softirqs last disabled at (168): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 230.395067] ---[ end trace 0000000000000000 ]--- 11:42:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:42:11 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) [ 230.442089] Zero length message leads to an empty skb 11:42:18 executing program 3: socket$netlink(0x10, 0x3, 0x5) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0xd02, 0x0, @mcast2, @loopback, 0x40, 0x1, 0x3, 0x900}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x20, 0x2, 0xb32, 0x0, @private0, @mcast1, 0x7, 0x1, 0x1, 0x14}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x40, 0x3, 0x5, @ipv4={'\x00', '\xff\xff', @local}, @loopback, 0x7, 0x8, 0x9, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x3f, 0x8, 0x20, @loopback, @remote, 0x80, 0x700, 0xd48a}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001640)='cpuset.sched_load_balance\x00', 0x2, 0x0) 11:42:18 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000540)) timer_gettime(0x0, 0x0) 11:42:18 executing program 5: r0 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000740)='(]!\x00') 11:42:18 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:42:18 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:42:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r1) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:42:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:42:18 executing program 4: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r0) 11:42:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:42:18 executing program 5: r0 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r0) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000740)='(]!\x00') 11:42:18 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000540)) timer_gettime(0x0, 0x0) 11:42:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r1) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000001f00), 0x2002, 0x0) 11:42:18 executing program 7: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 11:42:18 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000180)=""/141, 0x8d}, 0x101) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@un=@abs, &(0x7f0000000300)=0x80) r0 = syz_io_uring_complete(0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000340)=@tipc, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f0000000680)=""/154, 0x9a}], 0x6}, 0x100) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001e40)='/sys/module/mac80211_hwsim', 0x111800, 0x18) syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r0) 11:42:18 executing program 4: keyctl$negate(0xd, 0x0, 0x7fff, 0x0) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "92d7af364a500f72e77025b87c95bf7e238b543af5320dae9d3c0fadddcfb456a3a6055d92da8b41f6449ec07e5aa66e051fbe18ee0866b07d9b1b52f6869737", 0x15}, 0x48, r0) 11:42:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000004c40)={0x52c, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [{{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x0, 0x81, 0x80000001}, {0x8001, 0x1, 0x0, 0x9}, {0x5, 0x7f, 0x1f, 0x27d1}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x160, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x6, 0x38, 0x6}, {0x2, 0x93, 0x81, 0x5e4b}, {0x7ff, 0x3f, 0x81, 0x4fa4}, {0x5, 0xfc, 0x8, 0xffff}, {0x7f, 0x2, 0x0, 0xffff}, {0x83e, 0x9, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4, 0x81, 0xe0, 0x795}, {0x2, 0x7}, {0xffff, 0x4, 0x2, 0xfffffff8}, {0x7, 0x4, 0x10, 0x8}, {0x5b, 0x2, 0x1f, 0x5}]}}}]}}]}, 0x52c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) VM DIAGNOSIS: 11:42:11 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88800f757b40 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11001eeaf69 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88800f757b78 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555808df400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fff2d6f5f48 CR3=000000000716c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88800f54f488 R8 =0000000000000000 R9 =ffffed1001e00046 R10=0000000000000020 R11=666666203a302320 R12=0000000000000020 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555576a14400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe6a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f826f22d542 CR3=0000000045bbf000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000