Warning: Permanently added '[localhost]:58334' (ECDSA) to the list of known hosts. 2026/01/17 12:30:18 fuzzer started 2026/01/17 12:30:18 dialing manager at localhost:42157 syzkaller login: [ 44.923043] cgroup: Unknown subsys name 'net' [ 44.998236] cgroup: Unknown subsys name 'cpuset' [ 45.012175] cgroup: Unknown subsys name 'rlimit' 2026/01/17 12:30:29 syscalls: 204 2026/01/17 12:30:29 code coverage: enabled 2026/01/17 12:30:29 comparison tracing: enabled 2026/01/17 12:30:29 extra coverage: enabled 2026/01/17 12:30:29 setuid sandbox: enabled 2026/01/17 12:30:29 namespace sandbox: enabled 2026/01/17 12:30:29 Android sandbox: enabled 2026/01/17 12:30:29 fault injection: enabled 2026/01/17 12:30:29 leak checking: enabled 2026/01/17 12:30:29 net packet injection: enabled 2026/01/17 12:30:29 net device setup: enabled 2026/01/17 12:30:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/17 12:30:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/17 12:30:29 USB emulation: enabled 2026/01/17 12:30:29 hci packet injection: enabled 2026/01/17 12:30:29 wifi device emulation: enabled 2026/01/17 12:30:29 802.15.4 emulation: enabled 2026/01/17 12:30:29 fetching corpus: 0, signal 0/0 (executing program) 2026/01/17 12:30:30 starting 8 fuzzer processes 12:30:30 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) r4 = getegid() getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@privport}, {@noextend}, {@version_u}, {@cache_mmap}, {@version_9p2000}], [{@fsname={'fsname', 0x3d, '*\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '!/#'}}, {@subj_user}, {@smackfsroot={'smackfsroot', 0x3d, './cgroup.net/syz1\x00'}}, {@uid_gt={'uid>', r5}}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}}) r6 = syz_open_dev$hidraw(&(0x7f0000000400), 0x3, 0x80000) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = socket$inet_icmp(0x2, 0x2, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000440)=[r6, r7, r8, r1, r9, r2, r0, r3], 0x8) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x480, 0x0) ioctl$RTC_UIE_OFF(r10, 0x7004) r11 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x28000, 0x0) ioctl$RTC_WKALM_SET(r11, 0x4028700f, &(0x7f0000000500)={0x1, 0x1, {0x31, 0x35, 0x1, 0x1c, 0x8, 0x6, 0x5, 0x30, 0xffffffffffffffff}}) r12 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r12, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[r6, r10, 0xffffffffffffffff]}, 0x3) 12:30:30 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x907}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x47}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000740)=0x3, 0x4) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000408}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000880}, 0x801) 12:30:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r7) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) r8 = syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80004}, 0x4000000) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x0, 0x11, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) [ 55.451786] audit: type=1400 audit(1768653030.596:7): avc: denied { execmem } for pid=269 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:30:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000002c0)=""/211) r3 = syz_open_dev$rtc(&(0x7f00000003c0), 0x9, 0x400000) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$RTC_UIE_ON(r3, 0x7003) write$hidraw(r1, &(0x7f0000000400)="f1619a837b8c46e4c0935db9dd10730e3754303e35e56a0790c84594ad6ace7c394091b1cf544ef5081642356e3323373034df33e5721825994b2ebc1128ec8956769af3bf1988532db93fd7e8", 0x4d) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000004c0)) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x40, 0x8, 0x7b, {0x7b, 0x4, "a7244b8e395328b0e7dfda752d9cd5bde60eca38ed1f8e6a41407a1c2abbfdd5424bde7168a6a2be20457df19705d52728be70c45c584e0552ee5b7614dca079049fad3bcd4d37d7ca4d8a6703fe97cf937145772832b0af0fad646f6a7cdb811693658de3768de893f137dd467d7e900d7eb80dcc020517bd"}}, &(0x7f00000005c0)={0x0, 0x3, 0x6e, @string={0x6e, 0x3, "018ef65f3147601b354c65f7fa2326808bd989c811c8648498f08a895a09ee2e480dc68004ab3f8c547290f5a17dc55d71cb8ee8b22f4a8bf2de2bb93997a0b46fd471cf485438755df355f331cb3afb01c0789c70fa40b2500d404fcd8b1018f1d8b92a642716ac8ed2ba77"}}}, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x40, 0x13, 0xff, "970fb0641d6419669ba8c64d4c9a49b2c9185bad75636fb48dacead42aacefd87b73bcedbadd8e7738aa00b1d130cfdb68b7b6aa23df13e5aad26e658a3b0ea1bf90314be616eb4f5eff8fe898331ce57aed790edc464b03bf4fa22d2f8bcb38f255e09696758fad37b61923f0991637ff30ddf4a4d7ada19cfdefac6518aaf9cb099017a7d7ae1a6e90a8231c9124351dd4bb8bea7b7284df66be1b1443afe3d47e244f71a0c7a312ad8cdae077032001ca0cbd4040d47221893fdaa5c8efab7007b6a82a1bafd8435e67f0c578a2f7b3299db3c83c670f3942404754cc4eb58848a5382fceb31dc2c31b78a3fdc946fd5ce049f2aabcc3175c4ef4b8b070"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f0000000840)={0x20, 0x0, 0x63, {0x61, "ecaf344ab04c202a8f88311cc4e68e08cc516b8966b53b584f0e6134757c796fdad744ad72902624e0d6b3b8756d537af7735e8b9b3ef0302505ced445afee745ab5a5e8a42e2a3476206e6749d0a868e12112c59c169973b3a62f7da25c28a0f6"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0xff}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0xf0}}) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000980), 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) 12:30:30 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c014) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip_vti0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!-&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3d}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040090) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x2400c080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6f0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004010}, 0x8801) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x61d31300}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) getegid() sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000d80)=""/23) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x21}, 0x2406c084) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) 12:30:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000005c0), r7) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4061}, 0x20040000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x50}}, 0x4044018) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48804}, 0x11) 12:30:30 executing program 6: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:memory_device_t:s0\x00', 0x25) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x80, 0x8, 0x3, 0x9, {{0x25, 0x4, 0x2, 0x6, 0x94, 0x66, 0x0, 0x30, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@timestamp_addr={0x44, 0x2c, 0xf1, 0x1, 0x9, [{@private=0xa010100, 0x2}, {@local, 0xa9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbcf}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x80000001}]}, @timestamp_addr={0x44, 0x54, 0x71, 0x1, 0x4, [{@remote, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}, {@multicast2, 0x4}, {@broadcast, 0x3}, {@multicast2, 0x10000}, {@broadcast, 0xb7}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x1}, {@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xed}, {@broadcast, 0x3ff}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7, 0x8000, 0x8ea, 0x7fff, {{0x1b, 0x4, 0x0, 0x3, 0x6c, 0x67, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0xf, "1515c743d14f03af281e20c0ef"}, @timestamp_addr={0x44, 0x14, 0x82, 0x1, 0xe, [{@loopback, 0x5}, {@multicast2, 0x5}]}, @cipso={0x86, 0x17, 0x3, [{0x6, 0x9, "c782132d02a519"}, {0x7, 0x8, '_t#i[:'}]}, @rr={0x7, 0x7, 0xd4, [@broadcast]}, @ssrr={0x89, 0x17, 0x6c, [@private=0xa010100, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) socketpair(0x27, 0x2, 0x9, &(0x7f0000000300)={0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000340)={0x67446698, 0x1, 0x4, 0x4, 0x3, "33151b5ed99ae2da11f690392a0179f8476f21737afc4978fe9ec07d34c9677a5252d9f096faf4e6ea51a2f8a1b4d185d21017db483b316088bb67d8c4bc7ff1fc09349e5ba379a65c9a9fce735890e2a80ee5d035fe8a44c04da7796fe4ce2b9a31428bbd90be5a08de962533790c5d60485b8e568e76bc155135a408eb16e45d2a480d20a80ecca0cd50334c203fa2bcb9d8148066a6cf1cbc16a71e37e8a68ab00e67112590c7ac6ac62d91d230d502dad93a174a6ca769390a96ba2bfa9960b40bee6ea0aaa2ecb3897128c04a66caad8fc3ff96ebcd2c3ad07d1ceafd6e46383dd5b7b551d592c6b70bfb8f459a107509fda17048"}, 0x107) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)) write$bt_hci(r3, &(0x7f00000004c0)={0x1, @accept_phy_link={{0x436, 0xf5}, {0xc9, 0x6, 0x40, "64fed27cff98733b9a05367952a1b7bc921c67afb82ddd39b2d4400b6ce604a4a04f7bcb2562ba7eb8ec178e675da5600aebc023357f5e185dfefb1e44b50eda1dc445d1436c3349782c8e585c6ca230fde820707db83347c1e2b1a9b8aff1953c90aa5c9479472aa9be173c0545224b0971a5a36db596d5bbd47f8670ab4d98789ad43560e1d109f657c13bf018b42341d53bfe52a79f8d486e8643a69a74a651dd8963366b2d979a735d1168893c92ead95fc9c91761a7d9028bd73fd7735134646c35797f1129f7e93377b1b55c214600c0e8e5b8f7efd44f494de4ff41fa85987259db477bcdc9514625b88716f08293"}}}, 0xf9) r4 = socket$inet(0x2, 0x6, 0x1f) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000005c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000600)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000640)={'erspan0\x00', r5, 0x10, 0x80, 0x7, 0x4, {{0x9, 0x4, 0x1, 0x2, 0x24, 0x67, 0x0, 0x40, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x10}, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x7c, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @noop, @end, @end]}}}}}) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000700)={0x1}, 0x4) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000007c0)={0x14, &(0x7f0000000740)={0x40, 0x31, 0x4, {0x4, 0x5, "bc02"}}, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000800)={0x40, 0xe, 0xc3, "66daf8fa08d896b82ef80c4eab16e2942d2a49e5d3db489bce409f086a5f57400c30ad11e679ad6461b502e11c7db9011bd4bfafbdc582b1b5d85f0c712051e8cbfc7102a1e0b97e019059f85124db511a0fbfe5a38adee36b6e001012b9bb644ad41a27347315f037327e271097273fa16bfb4deac870cab04efdd8dc72ba1faf9f4c439cc8d7b55435231695f6ec38f79fb56c44131b6fab6b4e6f52c6db2f617bce0d3eda8df606d73f6fb3f978935112719c3748429d545a2ac5f04c7fe2225128"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x76}, &(0x7f0000000980)={0x20, 0x80, 0x1c, {0x2, 0x8, 0x3, 0x800, 0x34a, 0xc0d, 0x200, 0x7fff, 0x81, 0xfff9, 0x5, 0x3f}}, &(0x7f00000009c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000a00)={0x20, 0x83, 0x2}, &(0x7f0000000a40)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000a80)={0x20, 0x89, 0x2}}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000b40), 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000c80)={'ip_vti0\x00', &(0x7f0000000b80)={'gre0\x00', r5, 0x8, 0x700, 0x2, 0x6, {{0x35, 0x4, 0x2, 0x19, 0xd4, 0x67, 0x0, 0x5, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@cipso={0x86, 0x11, 0x3, [{0xb9646083266eec22, 0xb, "9d24c7fd8a1c636b34"}]}, @ra={0x94, 0x4}, @generic={0x88, 0x8, "4a0869325991"}, @timestamp_addr={0x44, 0x2c, 0x99, 0x1, 0x1, [{@loopback, 0x1f}, {@private=0xa010101, 0x3}, {@loopback, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc7}, {@rand_addr=0x64010101, 0x6}]}, @timestamp={0x44, 0x10, 0xb1, 0x0, 0x7, [0x6, 0x4, 0x100]}, @timestamp_prespec={0x44, 0x54, 0xbd, 0x3, 0x7, [{@private=0xa010101, 0x1}, {@broadcast, 0x6}, {@private=0xa010101}, {@multicast1, 0x8d16}, {@remote, 0x8}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0x2}, {@loopback, 0x350}, {@empty, 0x4}]}, @ra={0x94, 0x4}, @noop, @timestamp={0x44, 0xc, 0xf0, 0x0, 0xe, [0x1, 0x3]}]}}}}}) 12:30:30 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "fa043f38c385a3c1b5b21a59a8f7ccefba5c93b5c16300f92b37bc7374847c6be75bf3d17d72d53033a601640a42ef2303556b830f95161ad69347a34e55d3bb7123419fd651664d090facbe0f53822f1b333fc8f6da756b12126b497772d0455f72770fc8b5414935d4e8446765d4b7b9399a8771766dc9fb10ea82e2b03f0c448edc19843cebfda66dfbef4f36c422b4a23344d6baab33e2da78a232f2f6454f888b86bef07bf3d103149c0965e53f4ff8505dd7a367a256f74275a2c8478ffb881d801d2343858d2937a9bac03d5af3334617188f65443dfe76aea6b73b11437dfd362dc7e50aa9942219cd701b93500c8aa35df270ca6c57a1002260dbad7274464e5a46f607889a90849282ee60ab2f5b6592f402cac9be70fce9463a9f787b2ba5360559ddb96e85dbb5dfe1604984796442677d41a4f80c9bb83e1dbca483b4d4cf8beb8a12a4a024938eca47d7c70ace35ed960f57468373b24a3552501a1fcfe33ebc1ecebaec375137eef2c4a031a1598e5ba76603b37b1d3229c00d1d875293121a0e90366394588127ecd3659e37c3efc0d55e091e86b002ba47e4185562dd329751ef411add7a6c97bb43f078bf631fba2dfb963ccad24113b0f2e332158203e4163a10cf0d7bffee66621a1d0af6540810d6f85b3cf2d0f7cc7fd34e68091e738f8fd238d8d3a0bf00f3dcb6cbebfa9eddc817b09a9a0566774969f4686e675323cfa749ee8e3bbe3590ddab4bc93cda2a62129220d3a1e643af9a2224053c0efae0fd0c34ddf8d1a9c64a5c8e334fa82ddc6b9aec558361feef81bc6633d90f217b49b0bb0faf4dccfb7b3624d095eb2d0fba788eb4d2aac44b1700cd54d9af4cc2729f2b6b7e39efaee3d0e133e438e7568b2e60bbcda2d54eb871ae132fbe8e4d6768bdbe0c562d1679a196e8aa2df1a2d7dab1ea2b3c980f150574882a3cc9e50ac82dd93231d57a23e04b3c529da9645b8a924f4bb1f62dbbff4174a469f002e4daa42fa7f8cdea8d6aa38cf0cde0272493b1beba0c33f43e33a246e251ae7dd1e8ab73b6f3ab6fb3172423b551566a07746acacae60e897f6275bc66ee6fe0dcb3b9007f44b66f9ac6cb0cd50aaa1b111decb6d6cab9bdae5dc96f0cc267539abc4ce110fbda76f5b23bb46a814bf856abb2ec19091527c4808a55185a51c2fe85685d7117b10b7a241958a3a37b781c4ad31bea5cbf4142ca906bc69c74c79f3f0a10a33355f3a77c92c256a3790b326e8972a51db16bd98906e68cc1f156db66e3409d2eec5ac81cb41691706286590221fcdcc8fab1cb4d7022d3353f9542fb6d40b472146019e43b621f3a930f687e7a770f8582f09af3c38af9716c645192dbc93d3d75975e5d59cfcf4cd0f4b55ff7d6596805ea71dffeb5a7ff5d178ab9eb32e6a7df989375f79107b8b0b89b5798ae2dfed8c3c415f456ba07409785e5efd7628529fe013ec6957794ea051da786fa13303799a1af49cff0eb44bbea1f98eca53c2dd4dbb9531d771d9860afd7ae1dd8dd7badc45dbc5927fa111d302f7f53ab1afdf1de906c84f4f5236972991f6dc4e8601bffe29281abc77323c20bd80ed920ed9cec8d93cd45f1ff8659c012acf7e6e2f016cb82cfd051847717674c81434fe4fcc768bc568fba9e5df0c8bc67a19b1e6e162e508d25b2ebac361512d149a8c476e7ef1e050e0145f90ed1b040ea78bd2b61e73814126bfd06af94eaf9b1fe3465c07b26a7c2e0c7f792b24da96b138b2e090d70888d5d99385c721d042c877e7f8b08c7a9e398a135f13ca3166f7fb6f49d07fe22cdd19dba80c931cbe00378fca4105247f4636c9b2117343a8859b3e5fe42b26afe6797cee0c1d72ef3e01ac404443b399cd013694e9cdd53f8d8316b087d00366e259a69485a4b6511834d2ec5e98072aa7d6519929bf94a39baa37c54534dd27364d6ff1d2c999eb27a57fbe1cbef688b56e28440aec2aed993de9cfab6fc9f8fac449a43a6a222a7d15dd7a3517fed501c49db23c954668a5877a97d51bdd5b0e07c9ce359262e7e53a699922f86f431a12a08f70930fd2e08e90740785ae5a283c9e43819e25373406c64a8f3a98fb88c7630743807901763690eefc762b269b436a35e76f2ead8586d534bbd2402f9f0e4f33b7e6ff9cd27394acdfb2b9bdf222de4315e7c578983e0d0d8d86a1e5d61e10639fa41405162f413ef679a4bb860c8bd2efde07278fef11142571182b6cf5b4c2ed8973097f9cb8ca402fae338f9e89d223acfc4fad770c4e1000f08ee1edd36c1e0087864e9471144ba403a79eb15eafe82725ccf63b8a5bb1ae8c4675d6af3a7a327adceea13f9aa2b9ae054d011cda4d99a67eb0667ba554dd374bd270df371f2c47a00237f22355faba7e7623a790aa21cff81874a553ae9d6b2cbd349ef3602c7ea16df6ea67b25b032bba4c4ed13cf180a1d1ba5d695d446a0d6a20922a54bc5d93a553183302ac27ae03c038e97c1b94adffc603176ab1df16c0711276b1ade9486f6c683829b4a49b5e49d1a094d4fb8a2929d2039eb013a9d241c3cb5e19f67d047af41b711ed7c895a67909a23f3f33f86c8b58e160f5d2b80585b707ba64c85042cfb1fb3df9fdf5007b8bf4cddc4b8167856956cacde7bda2fd9dac5513f43b0cc0eccdf22dcd98bd95d00f2ace87cdde5eb229701349ee587360233bcfab68248b7e76e85e72cfe2c4ab47ed21a8ee9ae183ee66436b167396069822c923f1d716f38558442995791554dbc58d5fe4d52450bb5d155244d7bcd1404ed55ba24049fa987bc4916a1d3661bd0a179646eda50716b8e3c889e29059bd67ef19dfcb79f8c9274d54d1a3c4dc9486d6dab972dd4d5b017139629182657eb2844a357a5dd833481ced2e9a4f48092485ce82d8f59b2088f7cebe0ed9424394a7dc08c99de9994d0a4bd66095555983413a73dac573561a0a508008adcc9a2b30a56a894b77cf1c878116224b6d163667ea4f35877b843b6d890c44442362e46aaebf1604652c0088b01a9be6038561ddac32381a5e736fd803eba9113584232fd4b70f0d553bce2ba9567a3b534e2a535f8a8948b0ef9f03cb6874b5a224caf69135a75531a39c99d3099055c9a3946266ab0e2536f475d7261768e52365635bcbe465f96ff4bf04b413938794f8761bcb872c9c0ba914c24a780957a0a427d70637867857b0b4be20c996bcddf363d69f805b70ded600631fd5a0dae3f8dc36e902bb962338057ff75d0a322c974eba9cceeace0c75ae64ca11cd8daf7477c5f3c56d30b7f633a4b21b0cd01643c44689866622eb2df34a646c788aea01a716f69d8c1dc81f7db80e20c8e229e83ec9306b6da0b639ae2357f22898fd1aff8ed756a76da13038d6bbd2ddf4d9085e6e83c8912993154faa5af1de57441d7bdee21726539b6d4b387daa54b2c374c35718313257feb621a0e3bedc21431da2f2b3925a3b33eed99d08dbe3f0ba6001167808cb00ac0c71745775f72df22eb7889d737beae32922437fe3bd48f44e23eb199a432812d01808f30c8703aad0b81173f0129b12e40787823d3ca4af8dd5d0c591290a56ce041fc4946f9d54f0bc97c876a74ef6371a39f898eaf5b6a9762c2bbe270c51805d67c4df19eb827b6caa5cdd18d566783a4fded7483f4aa99c1e1cd16a744760d9fc3ea4ab569d7e22ee2655006efc126b581c1821452f70e871d0696ad968d990b72a9fa32e60ec6c890eaac935e40e468b41f241709221a0ce01a05c429e3a380784baac20387db02a775d668ac2d02f8b70bb8723b0c76ea652bcdca9a9a567abc88658214ceeb578b1a18caa270b4db2b705fa393779859d31f919d5cf7f4c62994d200763aecaafd59e0d203cbc85218ef36bfaa353fc53cad58dca6e5301263f18f4f2cd177e089228979853e10bb15f7d47ea41d53417abfd48c38ab1e"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc803) r6 = semget(0x1, 0x4, 0x8) semctl$GETNCNT(r6, 0x0, 0xe, &(0x7f0000001000)=""/140) r7 = gettid() r8 = syz_open_procfs$namespace(r7, &(0x7f00000010c0)='ns/ipc\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, r8, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}}, 0x4000) [ 56.666798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.669027] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.670435] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.671841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.673678] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.678444] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.682267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.684388] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.703197] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.706825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.798303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.808998] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.816020] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.835978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.847802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.868713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.871376] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.873440] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.880851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.882377] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.884010] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.892112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.894190] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.896853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.915646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.920231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 56.928194] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 56.933499] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 56.960843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 56.962929] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 56.965076] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 56.967835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 56.977833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 56.979053] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 57.019678] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 57.027978] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 57.041571] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 57.087839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 57.098921] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 57.105754] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 58.695180] Bluetooth: hci0: command tx timeout [ 58.758631] Bluetooth: hci1: command tx timeout [ 58.890685] Bluetooth: hci2: command tx timeout [ 59.014599] Bluetooth: hci3: command tx timeout [ 59.143093] Bluetooth: hci6: command tx timeout [ 59.143568] Bluetooth: hci7: command tx timeout [ 59.143720] Bluetooth: hci4: command tx timeout [ 59.270771] Bluetooth: hci5: command tx timeout [ 60.743262] Bluetooth: hci0: command tx timeout [ 60.806564] Bluetooth: hci1: command tx timeout [ 60.934572] Bluetooth: hci2: command tx timeout [ 61.062579] Bluetooth: hci3: command tx timeout [ 61.190644] Bluetooth: hci7: command tx timeout [ 61.193711] Bluetooth: hci4: command tx timeout [ 61.194112] Bluetooth: hci6: command tx timeout [ 61.319547] Bluetooth: hci5: command tx timeout [ 62.791614] Bluetooth: hci0: command tx timeout [ 62.856000] Bluetooth: hci1: command tx timeout [ 62.984418] Bluetooth: hci2: command tx timeout [ 63.110839] Bluetooth: hci3: command tx timeout [ 63.239150] Bluetooth: hci4: command tx timeout [ 63.239620] Bluetooth: hci6: command tx timeout [ 63.239640] Bluetooth: hci7: command tx timeout [ 63.367672] Bluetooth: hci5: command tx timeout [ 64.839695] Bluetooth: hci0: command tx timeout [ 64.904513] Bluetooth: hci1: command tx timeout [ 65.032598] Bluetooth: hci2: command tx timeout [ 65.159616] Bluetooth: hci3: command tx timeout [ 65.286688] Bluetooth: hci7: command tx timeout [ 65.287579] Bluetooth: hci4: command tx timeout [ 65.287603] Bluetooth: hci6: command tx timeout [ 65.414628] Bluetooth: hci5: command tx timeout [ 90.789022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.789728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.519997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.520951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.538385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.538973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.802889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.803541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.814206] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.889718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.890361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.277064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.277719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.304827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.305436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.433245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.433879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.590171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.591325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.817634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.819712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.826843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.827466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:31:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r7) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) r8 = syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80004}, 0x4000000) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x0, 0x11, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) 12:31:09 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "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"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc803) r6 = semget(0x1, 0x4, 0x8) semctl$GETNCNT(r6, 0x0, 0xe, &(0x7f0000001000)=""/140) r7 = gettid() r8 = syz_open_procfs$namespace(r7, &(0x7f00000010c0)='ns/ipc\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, r8, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}}, 0x4000) 12:31:09 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "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"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc803) r6 = semget(0x1, 0x4, 0x8) semctl$GETNCNT(r6, 0x0, 0xe, &(0x7f0000001000)=""/140) r7 = gettid() r8 = syz_open_procfs$namespace(r7, &(0x7f00000010c0)='ns/ipc\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, r8, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}}, 0x4000) [ 94.178910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.179504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.198572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.199733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:31:09 executing program 6: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:memory_device_t:s0\x00', 0x25) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x80, 0x8, 0x3, 0x9, {{0x25, 0x4, 0x2, 0x6, 0x94, 0x66, 0x0, 0x30, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@timestamp_addr={0x44, 0x2c, 0xf1, 0x1, 0x9, [{@private=0xa010100, 0x2}, {@local, 0xa9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbcf}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x80000001}]}, @timestamp_addr={0x44, 0x54, 0x71, 0x1, 0x4, [{@remote, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}, {@multicast2, 0x4}, {@broadcast, 0x3}, {@multicast2, 0x10000}, {@broadcast, 0xb7}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x1}, {@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xed}, {@broadcast, 0x3ff}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7, 0x8000, 0x8ea, 0x7fff, {{0x1b, 0x4, 0x0, 0x3, 0x6c, 0x67, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0xf, "1515c743d14f03af281e20c0ef"}, @timestamp_addr={0x44, 0x14, 0x82, 0x1, 0xe, [{@loopback, 0x5}, {@multicast2, 0x5}]}, @cipso={0x86, 0x17, 0x3, [{0x6, 0x9, "c782132d02a519"}, {0x7, 0x8, '_t#i[:'}]}, @rr={0x7, 0x7, 0xd4, [@broadcast]}, @ssrr={0x89, 0x17, 0x6c, [@private=0xa010100, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) socketpair(0x27, 0x2, 0x9, &(0x7f0000000300)={0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000340)={0x67446698, 0x1, 0x4, 0x4, 0x3, "33151b5ed99ae2da11f690392a0179f8476f21737afc4978fe9ec07d34c9677a5252d9f096faf4e6ea51a2f8a1b4d185d21017db483b316088bb67d8c4bc7ff1fc09349e5ba379a65c9a9fce735890e2a80ee5d035fe8a44c04da7796fe4ce2b9a31428bbd90be5a08de962533790c5d60485b8e568e76bc155135a408eb16e45d2a480d20a80ecca0cd50334c203fa2bcb9d8148066a6cf1cbc16a71e37e8a68ab00e67112590c7ac6ac62d91d230d502dad93a174a6ca769390a96ba2bfa9960b40bee6ea0aaa2ecb3897128c04a66caad8fc3ff96ebcd2c3ad07d1ceafd6e46383dd5b7b551d592c6b70bfb8f459a107509fda17048"}, 0x107) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)) write$bt_hci(r3, &(0x7f00000004c0)={0x1, @accept_phy_link={{0x436, 0xf5}, {0xc9, 0x6, 0x40, "64fed27cff98733b9a05367952a1b7bc921c67afb82ddd39b2d4400b6ce604a4a04f7bcb2562ba7eb8ec178e675da5600aebc023357f5e185dfefb1e44b50eda1dc445d1436c3349782c8e585c6ca230fde820707db83347c1e2b1a9b8aff1953c90aa5c9479472aa9be173c0545224b0971a5a36db596d5bbd47f8670ab4d98789ad43560e1d109f657c13bf018b42341d53bfe52a79f8d486e8643a69a74a651dd8963366b2d979a735d1168893c92ead95fc9c91761a7d9028bd73fd7735134646c35797f1129f7e93377b1b55c214600c0e8e5b8f7efd44f494de4ff41fa85987259db477bcdc9514625b88716f08293"}}}, 0xf9) r4 = socket$inet(0x2, 0x6, 0x1f) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000005c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000600)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000640)={'erspan0\x00', r5, 0x10, 0x80, 0x7, 0x4, {{0x9, 0x4, 0x1, 0x2, 0x24, 0x67, 0x0, 0x40, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x10}, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x7c, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @noop, @end, @end]}}}}}) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000700)={0x1}, 0x4) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000007c0)={0x14, &(0x7f0000000740)={0x40, 0x31, 0x4, {0x4, 0x5, "bc02"}}, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000800)={0x40, 0xe, 0xc3, "66daf8fa08d896b82ef80c4eab16e2942d2a49e5d3db489bce409f086a5f57400c30ad11e679ad6461b502e11c7db9011bd4bfafbdc582b1b5d85f0c712051e8cbfc7102a1e0b97e019059f85124db511a0fbfe5a38adee36b6e001012b9bb644ad41a27347315f037327e271097273fa16bfb4deac870cab04efdd8dc72ba1faf9f4c439cc8d7b55435231695f6ec38f79fb56c44131b6fab6b4e6f52c6db2f617bce0d3eda8df606d73f6fb3f978935112719c3748429d545a2ac5f04c7fe2225128"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x76}, &(0x7f0000000980)={0x20, 0x80, 0x1c, {0x2, 0x8, 0x3, 0x800, 0x34a, 0xc0d, 0x200, 0x7fff, 0x81, 0xfff9, 0x5, 0x3f}}, &(0x7f00000009c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000a00)={0x20, 0x83, 0x2}, &(0x7f0000000a40)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000a80)={0x20, 0x89, 0x2}}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000b40), 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000c80)={'ip_vti0\x00', &(0x7f0000000b80)={'gre0\x00', r5, 0x8, 0x700, 0x2, 0x6, {{0x35, 0x4, 0x2, 0x19, 0xd4, 0x67, 0x0, 0x5, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@cipso={0x86, 0x11, 0x3, [{0xb9646083266eec22, 0xb, "9d24c7fd8a1c636b34"}]}, @ra={0x94, 0x4}, @generic={0x88, 0x8, "4a0869325991"}, @timestamp_addr={0x44, 0x2c, 0x99, 0x1, 0x1, [{@loopback, 0x1f}, {@private=0xa010101, 0x3}, {@loopback, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc7}, {@rand_addr=0x64010101, 0x6}]}, @timestamp={0x44, 0x10, 0xb1, 0x0, 0x7, [0x6, 0x4, 0x100]}, @timestamp_prespec={0x44, 0x54, 0xbd, 0x3, 0x7, [{@private=0xa010101, 0x1}, {@broadcast, 0x6}, {@private=0xa010101}, {@multicast1, 0x8d16}, {@remote, 0x8}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0x2}, {@loopback, 0x350}, {@empty, 0x4}]}, @ra={0x94, 0x4}, @noop, @timestamp={0x44, 0xc, 0xf0, 0x0, 0xe, [0x1, 0x3]}]}}}}}) 12:31:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r7) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) r8 = syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80004}, 0x4000000) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x0, 0x11, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) 12:31:09 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "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"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc803) r6 = semget(0x1, 0x4, 0x8) semctl$GETNCNT(r6, 0x0, 0xe, &(0x7f0000001000)=""/140) r7 = gettid() r8 = syz_open_procfs$namespace(r7, &(0x7f00000010c0)='ns/ipc\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, r8, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}}, 0x4000) [ 94.302070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.302739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.470831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.477851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.554736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.555332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.766574] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 95.767221] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 95.773012] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 95.777299] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.778000] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.784207] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.791335] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 95.792881] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.794471] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 95.797360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 95.798110] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.809106] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 95.811853] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 95.812323] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 95.817360] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 95.821435] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 95.821993] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 95.824718] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 95.827366] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 95.828000] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 95.830164] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 95.832443] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 95.833247] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 95.836285] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 96.902667] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.798680] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.799577] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.799708] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.862637] Bluetooth: hci7: command 0x0c1a tx timeout [ 97.863648] Bluetooth: hci6: command 0x0c1a tx timeout [ 97.864595] Bluetooth: hci5: command 0x0c1a tx timeout [ 97.866910] Bluetooth: hci4: command 0x0c1a tx timeout [ 98.950623] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.848271] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.849189] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.850071] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.911549] Bluetooth: hci5: command 0x0c1a tx timeout [ 99.911580] Bluetooth: hci7: command 0x0c1a tx timeout [ 99.912044] Bluetooth: hci4: command 0x0c1a tx timeout [ 99.912884] Bluetooth: hci6: command 0x0c1a tx timeout [ 100.998648] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.895499] Bluetooth: hci2: command 0x0c1a tx timeout [ 101.895626] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.895673] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.958635] Bluetooth: hci5: command 0x0c1a tx timeout [ 101.959773] Bluetooth: hci7: command 0x0c1a tx timeout [ 101.959850] Bluetooth: hci4: command 0x0c1a tx timeout [ 101.960763] Bluetooth: hci6: command 0x0c1a tx timeout 12:31:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r7) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) r8 = syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80004}, 0x4000000) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x0, 0x11, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) 12:31:21 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "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"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc803) r6 = semget(0x1, 0x4, 0x8) semctl$GETNCNT(r6, 0x0, 0xe, &(0x7f0000001000)=""/140) r7 = gettid() r8 = syz_open_procfs$namespace(r7, &(0x7f00000010c0)='ns/ipc\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, r8, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) 12:31:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000005c0), r7) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4061}, 0x20040000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x50}}, 0x4044018) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48804}, 0x11) 12:31:21 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) r4 = getegid() getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@privport}, {@noextend}, {@version_u}, {@cache_mmap}, {@version_9p2000}], [{@fsname={'fsname', 0x3d, '*\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '!/#'}}, {@subj_user}, {@smackfsroot={'smackfsroot', 0x3d, './cgroup.net/syz1\x00'}}, {@uid_gt={'uid>', r5}}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}}) r6 = syz_open_dev$hidraw(&(0x7f0000000400), 0x3, 0x80000) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = socket$inet_icmp(0x2, 0x2, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000440)=[r6, r7, r8, r1, r9, r2, r0, r3], 0x8) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x480, 0x0) ioctl$RTC_UIE_OFF(r10, 0x7004) r11 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x28000, 0x0) ioctl$RTC_WKALM_SET(r11, 0x4028700f, &(0x7f0000000500)={0x1, 0x1, {0x31, 0x35, 0x1, 0x1c, 0x8, 0x6, 0x5, 0x30, 0xffffffffffffffff}}) r12 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r12, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[r6, r10, 0xffffffffffffffff]}, 0x3) 12:31:21 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c014) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip_vti0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!-&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3d}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040090) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x2400c080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6f0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004010}, 0x8801) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x61d31300}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) getegid() sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000d80)=""/23) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x21}, 0x2406c084) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) 12:31:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000002c0)=""/211) r3 = syz_open_dev$rtc(&(0x7f00000003c0), 0x9, 0x400000) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$RTC_UIE_ON(r3, 0x7003) write$hidraw(r1, &(0x7f0000000400)="f1619a837b8c46e4c0935db9dd10730e3754303e35e56a0790c84594ad6ace7c394091b1cf544ef5081642356e3323373034df33e5721825994b2ebc1128ec8956769af3bf1988532db93fd7e8", 0x4d) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000004c0)) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x40, 0x8, 0x7b, {0x7b, 0x4, "a7244b8e395328b0e7dfda752d9cd5bde60eca38ed1f8e6a41407a1c2abbfdd5424bde7168a6a2be20457df19705d52728be70c45c584e0552ee5b7614dca079049fad3bcd4d37d7ca4d8a6703fe97cf937145772832b0af0fad646f6a7cdb811693658de3768de893f137dd467d7e900d7eb80dcc020517bd"}}, &(0x7f00000005c0)={0x0, 0x3, 0x6e, @string={0x6e, 0x3, "018ef65f3147601b354c65f7fa2326808bd989c811c8648498f08a895a09ee2e480dc68004ab3f8c547290f5a17dc55d71cb8ee8b22f4a8bf2de2bb93997a0b46fd471cf485438755df355f331cb3afb01c0789c70fa40b2500d404fcd8b1018f1d8b92a642716ac8ed2ba77"}}}, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x40, 0x13, 0xff, "970fb0641d6419669ba8c64d4c9a49b2c9185bad75636fb48dacead42aacefd87b73bcedbadd8e7738aa00b1d130cfdb68b7b6aa23df13e5aad26e658a3b0ea1bf90314be616eb4f5eff8fe898331ce57aed790edc464b03bf4fa22d2f8bcb38f255e09696758fad37b61923f0991637ff30ddf4a4d7ada19cfdefac6518aaf9cb099017a7d7ae1a6e90a8231c9124351dd4bb8bea7b7284df66be1b1443afe3d47e244f71a0c7a312ad8cdae077032001ca0cbd4040d47221893fdaa5c8efab7007b6a82a1bafd8435e67f0c578a2f7b3299db3c83c670f3942404754cc4eb58848a5382fceb31dc2c31b78a3fdc946fd5ce049f2aabcc3175c4ef4b8b070"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f0000000840)={0x20, 0x0, 0x63, {0x61, "ecaf344ab04c202a8f88311cc4e68e08cc516b8966b53b584f0e6134757c796fdad744ad72902624e0d6b3b8756d537af7735e8b9b3ef0302505ced445afee745ab5a5e8a42e2a3476206e6749d0a868e12112c59c169973b3a62f7da25c28a0f6"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0xff}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0xf0}}) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000980), 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) 12:31:21 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x907}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x47}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000740)=0x3, 0x4) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000408}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000880}, 0x801) 12:31:21 executing program 6: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:memory_device_t:s0\x00', 0x25) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x80, 0x8, 0x3, 0x9, {{0x25, 0x4, 0x2, 0x6, 0x94, 0x66, 0x0, 0x30, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@timestamp_addr={0x44, 0x2c, 0xf1, 0x1, 0x9, [{@private=0xa010100, 0x2}, {@local, 0xa9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbcf}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x80000001}]}, @timestamp_addr={0x44, 0x54, 0x71, 0x1, 0x4, [{@remote, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}, {@multicast2, 0x4}, {@broadcast, 0x3}, {@multicast2, 0x10000}, {@broadcast, 0xb7}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x1}, {@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xed}, {@broadcast, 0x3ff}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000200)={'ip_vti0\x00', r2, 0x7, 0x8000, 0x8ea, 0x7fff, {{0x1b, 0x4, 0x0, 0x3, 0x6c, 0x67, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0xf, "1515c743d14f03af281e20c0ef"}, @timestamp_addr={0x44, 0x14, 0x82, 0x1, 0xe, [{@loopback, 0x5}, {@multicast2, 0x5}]}, @cipso={0x86, 0x17, 0x3, [{0x6, 0x9, "c782132d02a519"}, {0x7, 0x8, '_t#i[:'}]}, @rr={0x7, 0x7, 0xd4, [@broadcast]}, @ssrr={0x89, 0x17, 0x6c, [@private=0xa010100, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}}}}) socketpair(0x27, 0x2, 0x9, &(0x7f0000000300)={0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000340)={0x67446698, 0x1, 0x4, 0x4, 0x3, "33151b5ed99ae2da11f690392a0179f8476f21737afc4978fe9ec07d34c9677a5252d9f096faf4e6ea51a2f8a1b4d185d21017db483b316088bb67d8c4bc7ff1fc09349e5ba379a65c9a9fce735890e2a80ee5d035fe8a44c04da7796fe4ce2b9a31428bbd90be5a08de962533790c5d60485b8e568e76bc155135a408eb16e45d2a480d20a80ecca0cd50334c203fa2bcb9d8148066a6cf1cbc16a71e37e8a68ab00e67112590c7ac6ac62d91d230d502dad93a174a6ca769390a96ba2bfa9960b40bee6ea0aaa2ecb3897128c04a66caad8fc3ff96ebcd2c3ad07d1ceafd6e46383dd5b7b551d592c6b70bfb8f459a107509fda17048"}, 0x107) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)) write$bt_hci(r3, &(0x7f00000004c0)={0x1, @accept_phy_link={{0x436, 0xf5}, {0xc9, 0x6, 0x40, "64fed27cff98733b9a05367952a1b7bc921c67afb82ddd39b2d4400b6ce604a4a04f7bcb2562ba7eb8ec178e675da5600aebc023357f5e185dfefb1e44b50eda1dc445d1436c3349782c8e585c6ca230fde820707db83347c1e2b1a9b8aff1953c90aa5c9479472aa9be173c0545224b0971a5a36db596d5bbd47f8670ab4d98789ad43560e1d109f657c13bf018b42341d53bfe52a79f8d486e8643a69a74a651dd8963366b2d979a735d1168893c92ead95fc9c91761a7d9028bd73fd7735134646c35797f1129f7e93377b1b55c214600c0e8e5b8f7efd44f494de4ff41fa85987259db477bcdc9514625b88716f08293"}}}, 0xf9) r4 = socket$inet(0x2, 0x6, 0x1f) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000005c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000600)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000640)={'erspan0\x00', r5, 0x10, 0x80, 0x7, 0x4, {{0x9, 0x4, 0x1, 0x2, 0x24, 0x67, 0x0, 0x40, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x10}, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x7c, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @noop, @end, @end]}}}}}) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000700)={0x1}, 0x4) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000007c0)={0x14, &(0x7f0000000740)={0x40, 0x31, 0x4, {0x4, 0x5, "bc02"}}, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000800)={0x40, 0xe, 0xc3, "66daf8fa08d896b82ef80c4eab16e2942d2a49e5d3db489bce409f086a5f57400c30ad11e679ad6461b502e11c7db9011bd4bfafbdc582b1b5d85f0c712051e8cbfc7102a1e0b97e019059f85124db511a0fbfe5a38adee36b6e001012b9bb644ad41a27347315f037327e271097273fa16bfb4deac870cab04efdd8dc72ba1faf9f4c439cc8d7b55435231695f6ec38f79fb56c44131b6fab6b4e6f52c6db2f617bce0d3eda8df606d73f6fb3f978935112719c3748429d545a2ac5f04c7fe2225128"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x76}, &(0x7f0000000980)={0x20, 0x80, 0x1c, {0x2, 0x8, 0x3, 0x800, 0x34a, 0xc0d, 0x200, 0x7fff, 0x81, 0xfff9, 0x5, 0x3f}}, &(0x7f00000009c0)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000a00)={0x20, 0x83, 0x2}, &(0x7f0000000a40)={0x20, 0x87, 0x2, 0x5}, &(0x7f0000000a80)={0x20, 0x89, 0x2}}) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000b40), 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000c80)={'ip_vti0\x00', &(0x7f0000000b80)={'gre0\x00', r5, 0x8, 0x700, 0x2, 0x6, {{0x35, 0x4, 0x2, 0x19, 0xd4, 0x67, 0x0, 0x5, 0x2f, 0x0, @multicast2, @rand_addr=0x64010100, {[@cipso={0x86, 0x11, 0x3, [{0xb9646083266eec22, 0xb, "9d24c7fd8a1c636b34"}]}, @ra={0x94, 0x4}, @generic={0x88, 0x8, "4a0869325991"}, @timestamp_addr={0x44, 0x2c, 0x99, 0x1, 0x1, [{@loopback, 0x1f}, {@private=0xa010101, 0x3}, {@loopback, 0x7f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc7}, {@rand_addr=0x64010101, 0x6}]}, @timestamp={0x44, 0x10, 0xb1, 0x0, 0x7, [0x6, 0x4, 0x100]}, @timestamp_prespec={0x44, 0x54, 0xbd, 0x3, 0x7, [{@private=0xa010101, 0x1}, {@broadcast, 0x6}, {@private=0xa010101}, {@multicast1, 0x8d16}, {@remote, 0x8}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@remote, 0x2}, {@loopback, 0x350}, {@empty, 0x4}]}, @ra={0x94, 0x4}, @noop, @timestamp={0x44, 0xc, 0xf0, 0x0, 0xe, [0x1, 0x3]}]}}}}}) 12:31:21 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "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"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc803) r6 = semget(0x1, 0x4, 0x8) semctl$GETNCNT(r6, 0x0, 0xe, &(0x7f0000001000)=""/140) r7 = gettid() r8 = syz_open_procfs$namespace(r7, &(0x7f00000010c0)='ns/ipc\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, r8, 0x0) 12:31:21 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) r4 = getegid() getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@privport}, {@noextend}, {@version_u}, {@cache_mmap}, {@version_9p2000}], [{@fsname={'fsname', 0x3d, '*\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '!/#'}}, {@subj_user}, {@smackfsroot={'smackfsroot', 0x3d, './cgroup.net/syz1\x00'}}, {@uid_gt={'uid>', r5}}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}}) r6 = syz_open_dev$hidraw(&(0x7f0000000400), 0x3, 0x80000) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = socket$inet_icmp(0x2, 0x2, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000440)=[r6, r7, r8, r1, r9, r2, r0, r3], 0x8) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x480, 0x0) ioctl$RTC_UIE_OFF(r10, 0x7004) r11 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x28000, 0x0) ioctl$RTC_WKALM_SET(r11, 0x4028700f, &(0x7f0000000500)={0x1, 0x1, {0x31, 0x35, 0x1, 0x1c, 0x8, 0x6, 0x5, 0x30, 0xffffffffffffffff}}) r12 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r12, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[r6, r10, 0xffffffffffffffff]}, 0x3) [ 106.963297] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.966206] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.968426] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.970020] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.972670] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 106.973738] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 106.974996] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 106.976049] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 108.230643] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.999037] Bluetooth: hci7: command 0x0c1a tx timeout [ 109.000418] Bluetooth: hci6: command 0x0c1a tx timeout [ 109.000572] Bluetooth: hci5: command 0x0c1a tx timeout [ 109.001567] Bluetooth: hci4: command 0x0c1a tx timeout [ 109.001961] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.002978] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.003345] Bluetooth: hci1: command 0x0c1a tx timeout 12:31:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r7) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) r8 = syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80004}, 0x4000000) 12:31:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000005c0), r7) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4061}, 0x20040000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x50}}, 0x4044018) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48804}, 0x11) 12:31:30 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c014) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip_vti0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!-&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3d}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040090) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x2400c080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6f0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004010}, 0x8801) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x61d31300}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) getegid() sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000d80)=""/23) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x21}, 0x2406c084) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) 12:31:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000002c0)=""/211) r3 = syz_open_dev$rtc(&(0x7f00000003c0), 0x9, 0x400000) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$RTC_UIE_ON(r3, 0x7003) write$hidraw(r1, &(0x7f0000000400)="f1619a837b8c46e4c0935db9dd10730e3754303e35e56a0790c84594ad6ace7c394091b1cf544ef5081642356e3323373034df33e5721825994b2ebc1128ec8956769af3bf1988532db93fd7e8", 0x4d) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000004c0)) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x40, 0x8, 0x7b, {0x7b, 0x4, "a7244b8e395328b0e7dfda752d9cd5bde60eca38ed1f8e6a41407a1c2abbfdd5424bde7168a6a2be20457df19705d52728be70c45c584e0552ee5b7614dca079049fad3bcd4d37d7ca4d8a6703fe97cf937145772832b0af0fad646f6a7cdb811693658de3768de893f137dd467d7e900d7eb80dcc020517bd"}}, &(0x7f00000005c0)={0x0, 0x3, 0x6e, @string={0x6e, 0x3, "018ef65f3147601b354c65f7fa2326808bd989c811c8648498f08a895a09ee2e480dc68004ab3f8c547290f5a17dc55d71cb8ee8b22f4a8bf2de2bb93997a0b46fd471cf485438755df355f331cb3afb01c0789c70fa40b2500d404fcd8b1018f1d8b92a642716ac8ed2ba77"}}}, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x40, 0x13, 0xff, "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"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f0000000840)={0x20, 0x0, 0x63, {0x61, "ecaf344ab04c202a8f88311cc4e68e08cc516b8966b53b584f0e6134757c796fdad744ad72902624e0d6b3b8756d537af7735e8b9b3ef0302505ced445afee745ab5a5e8a42e2a3476206e6749d0a868e12112c59c169973b3a62f7da25c28a0f6"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0xff}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0xf0}}) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000980), 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) 12:31:30 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "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"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc803) r6 = semget(0x1, 0x4, 0x8) semctl$GETNCNT(r6, 0x0, 0xe, &(0x7f0000001000)=""/140) r7 = gettid() r8 = syz_open_procfs$namespace(r7, &(0x7f00000010c0)='ns/ipc\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, r8, 0x0) 12:31:30 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x907}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x47}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000740)=0x3, 0x4) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000408}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000880}, 0x801) 12:31:30 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) r4 = getegid() getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@privport}, {@noextend}, {@version_u}, {@cache_mmap}, {@version_9p2000}], [{@fsname={'fsname', 0x3d, '*\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '!/#'}}, {@subj_user}, {@smackfsroot={'smackfsroot', 0x3d, './cgroup.net/syz1\x00'}}, {@uid_gt={'uid>', r5}}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}}) r6 = syz_open_dev$hidraw(&(0x7f0000000400), 0x3, 0x80000) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = socket$inet_icmp(0x2, 0x2, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000440)=[r6, r7, r8, r1, r9, r2, r0, r3], 0x8) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x480, 0x0) ioctl$RTC_UIE_OFF(r10, 0x7004) r11 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x28000, 0x0) ioctl$RTC_WKALM_SET(r11, 0x4028700f, &(0x7f0000000500)={0x1, 0x1, {0x31, 0x35, 0x1, 0x1c, 0x8, 0x6, 0x5, 0x30, 0xffffffffffffffff}}) r12 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r12, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[r6, r10, 0xffffffffffffffff]}, 0x3) 12:31:30 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "fa043f38c385a3c1b5b21a59a8f7ccefba5c93b5c16300f92b37bc7374847c6be75bf3d17d72d53033a601640a42ef2303556b830f95161ad69347a34e55d3bb7123419fd651664d090facbe0f53822f1b333fc8f6da756b12126b497772d0455f72770fc8b5414935d4e8446765d4b7b9399a8771766dc9fb10ea82e2b03f0c448edc19843cebfda66dfbef4f36c422b4a23344d6baab33e2da78a232f2f6454f888b86bef07bf3d103149c0965e53f4ff8505dd7a367a256f74275a2c8478ffb881d801d2343858d2937a9bac03d5af3334617188f65443dfe76aea6b73b11437dfd362dc7e50aa9942219cd701b93500c8aa35df270ca6c57a1002260dbad7274464e5a46f607889a90849282ee60ab2f5b6592f402cac9be70fce9463a9f787b2ba5360559ddb96e85dbb5dfe1604984796442677d41a4f80c9bb83e1dbca483b4d4cf8beb8a12a4a024938eca47d7c70ace35ed960f57468373b24a3552501a1fcfe33ebc1ecebaec375137eef2c4a031a1598e5ba76603b37b1d3229c00d1d875293121a0e90366394588127ecd3659e37c3efc0d55e091e86b002ba47e4185562dd329751ef411add7a6c97bb43f078bf631fba2dfb963ccad24113b0f2e332158203e4163a10cf0d7bffee66621a1d0af6540810d6f85b3cf2d0f7cc7fd34e68091e738f8fd238d8d3a0bf00f3dcb6cbebfa9eddc817b09a9a0566774969f4686e675323cfa749ee8e3bbe3590ddab4bc93cda2a62129220d3a1e643af9a2224053c0efae0fd0c34ddf8d1a9c64a5c8e334fa82ddc6b9aec558361feef81bc6633d90f217b49b0bb0faf4dccfb7b3624d095eb2d0fba788eb4d2aac44b1700cd54d9af4cc2729f2b6b7e39efaee3d0e133e438e7568b2e60bbcda2d54eb871ae132fbe8e4d6768bdbe0c562d1679a196e8aa2df1a2d7dab1ea2b3c980f150574882a3cc9e50ac82dd93231d57a23e04b3c529da9645b8a924f4bb1f62dbbff4174a469f002e4daa42fa7f8cdea8d6aa38cf0cde0272493b1beba0c33f43e33a246e251ae7dd1e8ab73b6f3ab6fb3172423b551566a07746acacae60e897f6275bc66ee6fe0dcb3b9007f44b66f9ac6cb0cd50aaa1b111decb6d6cab9bdae5dc96f0cc267539abc4ce110fbda76f5b23bb46a814bf856abb2ec19091527c4808a55185a51c2fe85685d7117b10b7a241958a3a37b781c4ad31bea5cbf4142ca906bc69c74c79f3f0a10a33355f3a77c92c256a3790b326e8972a51db16bd98906e68cc1f156db66e3409d2eec5ac81cb41691706286590221fcdcc8fab1cb4d7022d3353f9542fb6d40b472146019e43b621f3a930f687e7a770f8582f09af3c38af9716c645192dbc93d3d75975e5d59cfcf4cd0f4b55ff7d6596805ea71dffeb5a7ff5d178ab9eb32e6a7df989375f79107b8b0b89b5798ae2dfed8c3c415f456ba07409785e5efd7628529fe013ec6957794ea051da786fa13303799a1af49cff0eb44bbea1f98eca53c2dd4dbb9531d771d9860afd7ae1dd8dd7badc45dbc5927fa111d302f7f53ab1afdf1de906c84f4f5236972991f6dc4e8601bffe29281abc77323c20bd80ed920ed9cec8d93cd45f1ff8659c012acf7e6e2f016cb82cfd051847717674c81434fe4fcc768bc568fba9e5df0c8bc67a19b1e6e162e508d25b2ebac361512d149a8c476e7ef1e050e0145f90ed1b040ea78bd2b61e73814126bfd06af94eaf9b1fe3465c07b26a7c2e0c7f792b24da96b138b2e090d70888d5d99385c721d042c877e7f8b08c7a9e398a135f13ca3166f7fb6f49d07fe22cdd19dba80c931cbe00378fca4105247f4636c9b2117343a8859b3e5fe42b26afe6797cee0c1d72ef3e01ac404443b399cd013694e9cdd53f8d8316b087d00366e259a69485a4b6511834d2ec5e98072aa7d6519929bf94a39baa37c54534dd27364d6ff1d2c999eb27a57fbe1cbef688b56e28440aec2aed993de9cfab6fc9f8fac449a43a6a222a7d15dd7a3517fed501c49db23c954668a5877a97d51bdd5b0e07c9ce359262e7e53a699922f86f431a12a08f70930fd2e08e90740785ae5a283c9e43819e25373406c64a8f3a98fb88c7630743807901763690eefc762b269b436a35e76f2ead8586d534bbd2402f9f0e4f33b7e6ff9cd27394acdfb2b9bdf222de4315e7c578983e0d0d8d86a1e5d61e10639fa41405162f413ef679a4bb860c8bd2efde07278fef11142571182b6cf5b4c2ed8973097f9cb8ca402fae338f9e89d223acfc4fad770c4e1000f08ee1edd36c1e0087864e9471144ba403a79eb15eafe82725ccf63b8a5bb1ae8c4675d6af3a7a327adceea13f9aa2b9ae054d011cda4d99a67eb0667ba554dd374bd270df371f2c47a00237f22355faba7e7623a790aa21cff81874a553ae9d6b2cbd349ef3602c7ea16df6ea67b25b032bba4c4ed13cf180a1d1ba5d695d446a0d6a20922a54bc5d93a553183302ac27ae03c038e97c1b94adffc603176ab1df16c0711276b1ade9486f6c683829b4a49b5e49d1a094d4fb8a2929d2039eb013a9d241c3cb5e19f67d047af41b711ed7c895a67909a23f3f33f86c8b58e160f5d2b80585b707ba64c85042cfb1fb3df9fdf5007b8bf4cddc4b8167856956cacde7bda2fd9dac5513f43b0cc0eccdf22dcd98bd95d00f2ace87cdde5eb229701349ee587360233bcfab68248b7e76e85e72cfe2c4ab47ed21a8ee9ae183ee66436b167396069822c923f1d716f38558442995791554dbc58d5fe4d52450bb5d155244d7bcd1404ed55ba24049fa987bc4916a1d3661bd0a179646eda50716b8e3c889e29059bd67ef19dfcb79f8c9274d54d1a3c4dc9486d6dab972dd4d5b017139629182657eb2844a357a5dd833481ced2e9a4f48092485ce82d8f59b2088f7cebe0ed9424394a7dc08c99de9994d0a4bd66095555983413a73dac573561a0a508008adcc9a2b30a56a894b77cf1c878116224b6d163667ea4f35877b843b6d890c44442362e46aaebf1604652c0088b01a9be6038561ddac32381a5e736fd803eba9113584232fd4b70f0d553bce2ba9567a3b534e2a535f8a8948b0ef9f03cb6874b5a224caf69135a75531a39c99d3099055c9a3946266ab0e2536f475d7261768e52365635bcbe465f96ff4bf04b413938794f8761bcb872c9c0ba914c24a780957a0a427d70637867857b0b4be20c996bcddf363d69f805b70ded600631fd5a0dae3f8dc36e902bb962338057ff75d0a322c974eba9cceeace0c75ae64ca11cd8daf7477c5f3c56d30b7f633a4b21b0cd01643c44689866622eb2df34a646c788aea01a716f69d8c1dc81f7db80e20c8e229e83ec9306b6da0b639ae2357f22898fd1aff8ed756a76da13038d6bbd2ddf4d9085e6e83c8912993154faa5af1de57441d7bdee21726539b6d4b387daa54b2c374c35718313257feb621a0e3bedc21431da2f2b3925a3b33eed99d08dbe3f0ba6001167808cb00ac0c71745775f72df22eb7889d737beae32922437fe3bd48f44e23eb199a432812d01808f30c8703aad0b81173f0129b12e40787823d3ca4af8dd5d0c591290a56ce041fc4946f9d54f0bc97c876a74ef6371a39f898eaf5b6a9762c2bbe270c51805d67c4df19eb827b6caa5cdd18d566783a4fded7483f4aa99c1e1cd16a744760d9fc3ea4ab569d7e22ee2655006efc126b581c1821452f70e871d0696ad968d990b72a9fa32e60ec6c890eaac935e40e468b41f241709221a0ce01a05c429e3a380784baac20387db02a775d668ac2d02f8b70bb8723b0c76ea652bcdca9a9a567abc88658214ceeb578b1a18caa270b4db2b705fa393779859d31f919d5cf7f4c62994d200763aecaafd59e0d203cbc85218ef36bfaa353fc53cad58dca6e5301263f18f4f2cd177e089228979853e10bb15f7d47ea41d53417abfd48c38ab1e"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc803) r6 = semget(0x1, 0x4, 0x8) semctl$GETNCNT(r6, 0x0, 0xe, &(0x7f0000001000)=""/140) gettid() mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, 0xffffffffffffffff, 0x0) 12:31:30 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) r4 = getegid() getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@privport}, {@noextend}, {@version_u}, {@cache_mmap}, {@version_9p2000}], [{@fsname={'fsname', 0x3d, '*\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '!/#'}}, {@subj_user}, {@smackfsroot={'smackfsroot', 0x3d, './cgroup.net/syz1\x00'}}, {@uid_gt={'uid>', r5}}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}}) r6 = syz_open_dev$hidraw(&(0x7f0000000400), 0x3, 0x80000) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = socket$inet_icmp(0x2, 0x2, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000440)=[r6, r7, r8, r1, r9, r2, r0, r3], 0x8) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x480, 0x0) ioctl$RTC_UIE_OFF(r10, 0x7004) r11 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x28000, 0x0) ioctl$RTC_WKALM_SET(r11, 0x4028700f, &(0x7f0000000500)={0x1, 0x1, {0x31, 0x35, 0x1, 0x1c, 0x8, 0x6, 0x5, 0x30, 0xffffffffffffffff}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[r6, r10, 0xffffffffffffffff]}, 0x3) 12:31:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000005c0), r7) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4061}, 0x20040000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x50}}, 0x4044018) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48804}, 0x11) 12:31:30 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "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"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc803) r6 = semget(0x1, 0x4, 0x8) semctl$GETNCNT(r6, 0x0, 0xe, &(0x7f0000001000)=""/140) r7 = gettid() r8 = syz_open_procfs$namespace(r7, &(0x7f00000010c0)='ns/ipc\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, r8, 0x0) 12:31:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r7) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) r8 = syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80004}, 0x4000000) 12:31:30 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c014) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip_vti0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!-&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3d}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040090) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x2400c080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6f0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004010}, 0x8801) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x61d31300}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) getegid() sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000d80)=""/23) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x21}, 0x2406c084) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) 12:31:30 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "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"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc803) r6 = semget(0x1, 0x4, 0x8) semctl$GETNCNT(r6, 0x0, 0xe, &(0x7f0000001000)=""/140) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, 0xffffffffffffffff, 0x0) 12:31:30 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c014) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip_vti0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!-&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3d}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040090) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x2400c080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6f0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004010}, 0x8801) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x61d31300}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) getegid() sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000d80)=""/23) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x21}, 0x2406c084) 12:31:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000005c0), r7) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4061}, 0x20040000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x50}}, 0x4044018) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 12:31:30 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c014) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip_vti0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!-&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3d}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040090) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x2400c080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6f0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004010}, 0x8801) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x61d31300}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) getegid() sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000d80)=""/23) 12:31:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r7) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) r8 = syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80004}, 0x4000000) 12:31:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000005c0), r7) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4061}, 0x20040000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x50}}, 0x4044018) 12:31:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000005c0), r6) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4061}, 0x20040000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan1\x00'}) 12:31:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000002c0)=""/211) r3 = syz_open_dev$rtc(&(0x7f00000003c0), 0x9, 0x400000) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$RTC_UIE_ON(r3, 0x7003) write$hidraw(r1, &(0x7f0000000400)="f1619a837b8c46e4c0935db9dd10730e3754303e35e56a0790c84594ad6ace7c394091b1cf544ef5081642356e3323373034df33e5721825994b2ebc1128ec8956769af3bf1988532db93fd7e8", 0x4d) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000004c0)) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x40, 0x8, 0x7b, {0x7b, 0x4, "a7244b8e395328b0e7dfda752d9cd5bde60eca38ed1f8e6a41407a1c2abbfdd5424bde7168a6a2be20457df19705d52728be70c45c584e0552ee5b7614dca079049fad3bcd4d37d7ca4d8a6703fe97cf937145772832b0af0fad646f6a7cdb811693658de3768de893f137dd467d7e900d7eb80dcc020517bd"}}, &(0x7f00000005c0)={0x0, 0x3, 0x6e, @string={0x6e, 0x3, "018ef65f3147601b354c65f7fa2326808bd989c811c8648498f08a895a09ee2e480dc68004ab3f8c547290f5a17dc55d71cb8ee8b22f4a8bf2de2bb93997a0b46fd471cf485438755df355f331cb3afb01c0789c70fa40b2500d404fcd8b1018f1d8b92a642716ac8ed2ba77"}}}, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x40, 0x13, 0xff, "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"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f0000000840)={0x20, 0x0, 0x63, {0x61, "ecaf344ab04c202a8f88311cc4e68e08cc516b8966b53b584f0e6134757c796fdad744ad72902624e0d6b3b8756d537af7735e8b9b3ef0302505ced445afee745ab5a5e8a42e2a3476206e6749d0a868e12112c59c169973b3a62f7da25c28a0f6"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0xff}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0xf0}}) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000980), 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) [ 115.866778] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 115.868013] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 115.869647] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 115.870252] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 115.871095] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 115.871838] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 115.872371] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 115.875376] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 117.127573] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.895575] Bluetooth: hci7: command 0x0c1a tx timeout [ 117.895702] Bluetooth: hci6: command 0x0c1a tx timeout [ 117.896085] Bluetooth: hci5: command 0x0c1a tx timeout [ 117.897120] Bluetooth: hci4: command 0x0c1a tx timeout [ 117.897514] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.897586] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.898464] Bluetooth: hci1: command 0x0c1a tx timeout 12:31:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r7) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) r8 = syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x0) 12:31:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000005c0), r6) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x4}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4061}, 0x20040000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:31:39 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) r4 = getegid() getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@privport}, {@noextend}, {@version_u}, {@cache_mmap}, {@version_9p2000}], [{@fsname={'fsname', 0x3d, '*\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '!/#'}}, {@subj_user}, {@smackfsroot={'smackfsroot', 0x3d, './cgroup.net/syz1\x00'}}, {@uid_gt={'uid>', r5}}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}}) r6 = syz_open_dev$hidraw(&(0x7f0000000400), 0x3, 0x80000) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = socket$inet_icmp(0x2, 0x2, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000440)=[r6, r7, r8, r1, r9, r2, r0, r3], 0x8) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x480, 0x0) ioctl$RTC_UIE_OFF(r10, 0x7004) r11 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x28000, 0x0) ioctl$RTC_WKALM_SET(r11, 0x4028700f, &(0x7f0000000500)={0x1, 0x1, {0x31, 0x35, 0x1, 0x1c, 0x8, 0x6, 0x5, 0x30, 0xffffffffffffffff}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[r6, r10, 0xffffffffffffffff]}, 0x3) 12:31:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000002c0)=""/211) r3 = syz_open_dev$rtc(&(0x7f00000003c0), 0x9, 0x400000) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$RTC_UIE_ON(r3, 0x7003) write$hidraw(r1, &(0x7f0000000400)="f1619a837b8c46e4c0935db9dd10730e3754303e35e56a0790c84594ad6ace7c394091b1cf544ef5081642356e3323373034df33e5721825994b2ebc1128ec8956769af3bf1988532db93fd7e8", 0x4d) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000004c0)) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x40, 0x8, 0x7b, {0x7b, 0x4, "a7244b8e395328b0e7dfda752d9cd5bde60eca38ed1f8e6a41407a1c2abbfdd5424bde7168a6a2be20457df19705d52728be70c45c584e0552ee5b7614dca079049fad3bcd4d37d7ca4d8a6703fe97cf937145772832b0af0fad646f6a7cdb811693658de3768de893f137dd467d7e900d7eb80dcc020517bd"}}, &(0x7f00000005c0)={0x0, 0x3, 0x6e, @string={0x6e, 0x3, "018ef65f3147601b354c65f7fa2326808bd989c811c8648498f08a895a09ee2e480dc68004ab3f8c547290f5a17dc55d71cb8ee8b22f4a8bf2de2bb93997a0b46fd471cf485438755df355f331cb3afb01c0789c70fa40b2500d404fcd8b1018f1d8b92a642716ac8ed2ba77"}}}, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x40, 0x13, 0xff, "970fb0641d6419669ba8c64d4c9a49b2c9185bad75636fb48dacead42aacefd87b73bcedbadd8e7738aa00b1d130cfdb68b7b6aa23df13e5aad26e658a3b0ea1bf90314be616eb4f5eff8fe898331ce57aed790edc464b03bf4fa22d2f8bcb38f255e09696758fad37b61923f0991637ff30ddf4a4d7ada19cfdefac6518aaf9cb099017a7d7ae1a6e90a8231c9124351dd4bb8bea7b7284df66be1b1443afe3d47e244f71a0c7a312ad8cdae077032001ca0cbd4040d47221893fdaa5c8efab7007b6a82a1bafd8435e67f0c578a2f7b3299db3c83c670f3942404754cc4eb58848a5382fceb31dc2c31b78a3fdc946fd5ce049f2aabcc3175c4ef4b8b070"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f0000000840)={0x20, 0x0, 0x63, {0x61, "ecaf344ab04c202a8f88311cc4e68e08cc516b8966b53b584f0e6134757c796fdad744ad72902624e0d6b3b8756d537af7735e8b9b3ef0302505ced445afee745ab5a5e8a42e2a3476206e6749d0a868e12112c59c169973b3a62f7da25c28a0f6"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0xff}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0xf0}}) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000980), 0x4) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) 12:31:39 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "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"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc803) semget(0x1, 0x4, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, 0xffffffffffffffff, 0x0) 12:31:39 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x907}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x47}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000740)=0x3, 0x4) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000408}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000880}, 0x801) 12:31:39 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c014) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip_vti0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!-&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3d}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040090) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x2400c080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6f0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004010}, 0x8801) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x61d31300}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) getegid() sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 12:31:39 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "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"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc803) r6 = semget(0x1, 0x4, 0x8) semctl$GETNCNT(r6, 0x0, 0xe, &(0x7f0000001000)=""/140) r7 = gettid() r8 = syz_open_procfs$namespace(r7, &(0x7f00000010c0)='ns/ipc\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, r8, 0x0) 12:31:40 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "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"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc803) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, 0xffffffffffffffff, 0x0) 12:31:40 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) r4 = getegid() getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@privport}, {@noextend}, {@version_u}, {@cache_mmap}, {@version_9p2000}], [{@fsname={'fsname', 0x3d, '*\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '!/#'}}, {@subj_user}, {@smackfsroot={'smackfsroot', 0x3d, './cgroup.net/syz1\x00'}}, {@uid_gt={'uid>', r5}}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}}) r6 = syz_open_dev$hidraw(&(0x7f0000000400), 0x3, 0x80000) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = socket$inet_icmp(0x2, 0x2, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000440)=[r6, r7, r8, r1, r9, r2, r0, r3], 0x8) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x480, 0x0) ioctl$RTC_UIE_OFF(r10, 0x7004) r11 = openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x28000, 0x0) ioctl$RTC_WKALM_SET(r11, 0x4028700f, &(0x7f0000000500)={0x1, 0x1, {0x31, 0x35, 0x1, 0x1c, 0x8, 0x6, 0x5, 0x30, 0xffffffffffffffff}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[r6, r10, 0xffffffffffffffff]}, 0x3) 12:31:40 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "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"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc803) r6 = semget(0x1, 0x4, 0x8) semctl$GETNCNT(r6, 0x0, 0xe, &(0x7f0000001000)=""/140) r7 = gettid() syz_open_procfs$namespace(r7, &(0x7f00000010c0)='ns/ipc\x00') 12:31:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000005c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:31:40 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c014) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip_vti0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!-&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3d}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040090) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x2400c080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6f0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004010}, 0x8801) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x61d31300}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) getegid() 12:31:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r7) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:31:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:31:40 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c014) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip_vti0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!-&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3d}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040090) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x2400c080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6f0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004010}, 0x8801) syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) getegid() 12:31:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) [ 125.745796] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.748147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.750776] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.752876] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.754927] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 125.758020] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 125.759969] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 125.762117] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 127.047716] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.750684] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.814670] Bluetooth: hci7: command 0x0c1a tx timeout [ 127.815569] Bluetooth: hci6: command 0x0c1a tx timeout [ 127.815844] Bluetooth: hci5: command 0x0c1a tx timeout [ 127.816229] Bluetooth: hci4: command 0x0c1a tx timeout [ 127.817338] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.817732] Bluetooth: hci2: command 0x0c1a tx timeout 12:31:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:31:48 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c014) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip_vti0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!-&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3d}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040090) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x2400c080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6f0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004010}, 0x8801) getegid() 12:31:48 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x907}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x47}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000740)=0x3, 0x4) 12:31:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r7) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:31:48 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "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"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc803) r6 = semget(0x1, 0x4, 0x8) semctl$GETNCNT(r6, 0x0, 0xe, &(0x7f0000001000)=""/140) gettid() 12:31:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000002c0)=""/211) r3 = syz_open_dev$rtc(&(0x7f00000003c0), 0x9, 0x400000) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$RTC_UIE_ON(r3, 0x7003) write$hidraw(r1, &(0x7f0000000400)="f1619a837b8c46e4c0935db9dd10730e3754303e35e56a0790c84594ad6ace7c394091b1cf544ef5081642356e3323373034df33e5721825994b2ebc1128ec8956769af3bf1988532db93fd7e8", 0x4d) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000004c0)) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x40, 0x8, 0x7b, {0x7b, 0x4, "a7244b8e395328b0e7dfda752d9cd5bde60eca38ed1f8e6a41407a1c2abbfdd5424bde7168a6a2be20457df19705d52728be70c45c584e0552ee5b7614dca079049fad3bcd4d37d7ca4d8a6703fe97cf937145772832b0af0fad646f6a7cdb811693658de3768de893f137dd467d7e900d7eb80dcc020517bd"}}, &(0x7f00000005c0)={0x0, 0x3, 0x6e, @string={0x6e, 0x3, "018ef65f3147601b354c65f7fa2326808bd989c811c8648498f08a895a09ee2e480dc68004ab3f8c547290f5a17dc55d71cb8ee8b22f4a8bf2de2bb93997a0b46fd471cf485438755df355f331cb3afb01c0789c70fa40b2500d404fcd8b1018f1d8b92a642716ac8ed2ba77"}}}, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x40, 0x13, 0xff, "970fb0641d6419669ba8c64d4c9a49b2c9185bad75636fb48dacead42aacefd87b73bcedbadd8e7738aa00b1d130cfdb68b7b6aa23df13e5aad26e658a3b0ea1bf90314be616eb4f5eff8fe898331ce57aed790edc464b03bf4fa22d2f8bcb38f255e09696758fad37b61923f0991637ff30ddf4a4d7ada19cfdefac6518aaf9cb099017a7d7ae1a6e90a8231c9124351dd4bb8bea7b7284df66be1b1443afe3d47e244f71a0c7a312ad8cdae077032001ca0cbd4040d47221893fdaa5c8efab7007b6a82a1bafd8435e67f0c578a2f7b3299db3c83c670f3942404754cc4eb58848a5382fceb31dc2c31b78a3fdc946fd5ce049f2aabcc3175c4ef4b8b070"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f0000000840)={0x20, 0x0, 0x63, {0x61, "ecaf344ab04c202a8f88311cc4e68e08cc516b8966b53b584f0e6134757c796fdad744ad72902624e0d6b3b8756d537af7735e8b9b3ef0302505ced445afee745ab5a5e8a42e2a3476206e6749d0a868e12112c59c169973b3a62f7da25c28a0f6"}}, &(0x7f00000008c0)={0x20, 0x1, 0x1, 0xff}, &(0x7f0000000900)={0x20, 0x0, 0x1, 0xf0}}) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) 12:31:48 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) r4 = getegid() getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@privport}, {@noextend}, {@version_u}, {@cache_mmap}, {@version_9p2000}], [{@fsname={'fsname', 0x3d, '*\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '!/#'}}, {@subj_user}, {@smackfsroot={'smackfsroot', 0x3d, './cgroup.net/syz1\x00'}}, {@uid_gt={'uid>', r5}}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}}) r6 = syz_open_dev$hidraw(&(0x7f0000000400), 0x3, 0x80000) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = socket$inet_icmp(0x2, 0x2, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000440)=[r6, r7, r8, r1, r9, r2, r0, r3], 0x8) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x480, 0x0) ioctl$RTC_UIE_OFF(r10, 0x7004) openat$hpet(0xffffffffffffff9c, &(0x7f00000004c0), 0x28000, 0x0) r11 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r11, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[r6, r10, 0xffffffffffffffff]}, 0x3) 12:31:48 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "fa043f38c385a3c1b5b21a59a8f7ccefba5c93b5c16300f92b37bc7374847c6be75bf3d17d72d53033a601640a42ef2303556b830f95161ad69347a34e55d3bb7123419fd651664d090facbe0f53822f1b333fc8f6da756b12126b497772d0455f72770fc8b5414935d4e8446765d4b7b9399a8771766dc9fb10ea82e2b03f0c448edc19843cebfda66dfbef4f36c422b4a23344d6baab33e2da78a232f2f6454f888b86bef07bf3d103149c0965e53f4ff8505dd7a367a256f74275a2c8478ffb881d801d2343858d2937a9bac03d5af3334617188f65443dfe76aea6b73b11437dfd362dc7e50aa9942219cd701b93500c8aa35df270ca6c57a1002260dbad7274464e5a46f607889a90849282ee60ab2f5b6592f402cac9be70fce9463a9f787b2ba5360559ddb96e85dbb5dfe1604984796442677d41a4f80c9bb83e1dbca483b4d4cf8beb8a12a4a024938eca47d7c70ace35ed960f57468373b24a3552501a1fcfe33ebc1ecebaec375137eef2c4a031a1598e5ba76603b37b1d3229c00d1d875293121a0e90366394588127ecd3659e37c3efc0d55e091e86b002ba47e4185562dd329751ef411add7a6c97bb43f078bf631fba2dfb963ccad24113b0f2e332158203e4163a10cf0d7bffee66621a1d0af6540810d6f85b3cf2d0f7cc7fd34e68091e738f8fd238d8d3a0bf00f3dcb6cbebfa9eddc817b09a9a0566774969f4686e675323cfa749ee8e3bbe3590ddab4bc93cda2a62129220d3a1e643af9a2224053c0efae0fd0c34ddf8d1a9c64a5c8e334fa82ddc6b9aec558361feef81bc6633d90f217b49b0bb0faf4dccfb7b3624d095eb2d0fba788eb4d2aac44b1700cd54d9af4cc2729f2b6b7e39efaee3d0e133e438e7568b2e60bbcda2d54eb871ae132fbe8e4d6768bdbe0c562d1679a196e8aa2df1a2d7dab1ea2b3c980f150574882a3cc9e50ac82dd93231d57a23e04b3c529da9645b8a924f4bb1f62dbbff4174a469f002e4daa42fa7f8cdea8d6aa38cf0cde0272493b1beba0c33f43e33a246e251ae7dd1e8ab73b6f3ab6fb3172423b551566a07746acacae60e897f6275bc66ee6fe0dcb3b9007f44b66f9ac6cb0cd50aaa1b111decb6d6cab9bdae5dc96f0cc267539abc4ce110fbda76f5b23bb46a814bf856abb2ec19091527c4808a55185a51c2fe85685d7117b10b7a241958a3a37b781c4ad31bea5cbf4142ca906bc69c74c79f3f0a10a33355f3a77c92c256a3790b326e8972a51db16bd98906e68cc1f156db66e3409d2eec5ac81cb41691706286590221fcdcc8fab1cb4d7022d3353f9542fb6d40b472146019e43b621f3a930f687e7a770f8582f09af3c38af9716c645192dbc93d3d75975e5d59cfcf4cd0f4b55ff7d6596805ea71dffeb5a7ff5d178ab9eb32e6a7df989375f79107b8b0b89b5798ae2dfed8c3c415f456ba07409785e5efd7628529fe013ec6957794ea051da786fa13303799a1af49cff0eb44bbea1f98eca53c2dd4dbb9531d771d9860afd7ae1dd8dd7badc45dbc5927fa111d302f7f53ab1afdf1de906c84f4f5236972991f6dc4e8601bffe29281abc77323c20bd80ed920ed9cec8d93cd45f1ff8659c012acf7e6e2f016cb82cfd051847717674c81434fe4fcc768bc568fba9e5df0c8bc67a19b1e6e162e508d25b2ebac361512d149a8c476e7ef1e050e0145f90ed1b040ea78bd2b61e73814126bfd06af94eaf9b1fe3465c07b26a7c2e0c7f792b24da96b138b2e090d70888d5d99385c721d042c877e7f8b08c7a9e398a135f13ca3166f7fb6f49d07fe22cdd19dba80c931cbe00378fca4105247f4636c9b2117343a8859b3e5fe42b26afe6797cee0c1d72ef3e01ac404443b399cd013694e9cdd53f8d8316b087d00366e259a69485a4b6511834d2ec5e98072aa7d6519929bf94a39baa37c54534dd27364d6ff1d2c999eb27a57fbe1cbef688b56e28440aec2aed993de9cfab6fc9f8fac449a43a6a222a7d15dd7a3517fed501c49db23c954668a5877a97d51bdd5b0e07c9ce359262e7e53a699922f86f431a12a08f70930fd2e08e90740785ae5a283c9e43819e25373406c64a8f3a98fb88c7630743807901763690eefc762b269b436a35e76f2ead8586d534bbd2402f9f0e4f33b7e6ff9cd27394acdfb2b9bdf222de4315e7c578983e0d0d8d86a1e5d61e10639fa41405162f413ef679a4bb860c8bd2efde07278fef11142571182b6cf5b4c2ed8973097f9cb8ca402fae338f9e89d223acfc4fad770c4e1000f08ee1edd36c1e0087864e9471144ba403a79eb15eafe82725ccf63b8a5bb1ae8c4675d6af3a7a327adceea13f9aa2b9ae054d011cda4d99a67eb0667ba554dd374bd270df371f2c47a00237f22355faba7e7623a790aa21cff81874a553ae9d6b2cbd349ef3602c7ea16df6ea67b25b032bba4c4ed13cf180a1d1ba5d695d446a0d6a20922a54bc5d93a553183302ac27ae03c038e97c1b94adffc603176ab1df16c0711276b1ade9486f6c683829b4a49b5e49d1a094d4fb8a2929d2039eb013a9d241c3cb5e19f67d047af41b711ed7c895a67909a23f3f33f86c8b58e160f5d2b80585b707ba64c85042cfb1fb3df9fdf5007b8bf4cddc4b8167856956cacde7bda2fd9dac5513f43b0cc0eccdf22dcd98bd95d00f2ace87cdde5eb229701349ee587360233bcfab68248b7e76e85e72cfe2c4ab47ed21a8ee9ae183ee66436b167396069822c923f1d716f38558442995791554dbc58d5fe4d52450bb5d155244d7bcd1404ed55ba24049fa987bc4916a1d3661bd0a179646eda50716b8e3c889e29059bd67ef19dfcb79f8c9274d54d1a3c4dc9486d6dab972dd4d5b017139629182657eb2844a357a5dd833481ced2e9a4f48092485ce82d8f59b2088f7cebe0ed9424394a7dc08c99de9994d0a4bd66095555983413a73dac573561a0a508008adcc9a2b30a56a894b77cf1c878116224b6d163667ea4f35877b843b6d890c44442362e46aaebf1604652c0088b01a9be6038561ddac32381a5e736fd803eba9113584232fd4b70f0d553bce2ba9567a3b534e2a535f8a8948b0ef9f03cb6874b5a224caf69135a75531a39c99d3099055c9a3946266ab0e2536f475d7261768e52365635bcbe465f96ff4bf04b413938794f8761bcb872c9c0ba914c24a780957a0a427d70637867857b0b4be20c996bcddf363d69f805b70ded600631fd5a0dae3f8dc36e902bb962338057ff75d0a322c974eba9cceeace0c75ae64ca11cd8daf7477c5f3c56d30b7f633a4b21b0cd01643c44689866622eb2df34a646c788aea01a716f69d8c1dc81f7db80e20c8e229e83ec9306b6da0b639ae2357f22898fd1aff8ed756a76da13038d6bbd2ddf4d9085e6e83c8912993154faa5af1de57441d7bdee21726539b6d4b387daa54b2c374c35718313257feb621a0e3bedc21431da2f2b3925a3b33eed99d08dbe3f0ba6001167808cb00ac0c71745775f72df22eb7889d737beae32922437fe3bd48f44e23eb199a432812d01808f30c8703aad0b81173f0129b12e40787823d3ca4af8dd5d0c591290a56ce041fc4946f9d54f0bc97c876a74ef6371a39f898eaf5b6a9762c2bbe270c51805d67c4df19eb827b6caa5cdd18d566783a4fded7483f4aa99c1e1cd16a744760d9fc3ea4ab569d7e22ee2655006efc126b581c1821452f70e871d0696ad968d990b72a9fa32e60ec6c890eaac935e40e468b41f241709221a0ce01a05c429e3a380784baac20387db02a775d668ac2d02f8b70bb8723b0c76ea652bcdca9a9a567abc88658214ceeb578b1a18caa270b4db2b705fa393779859d31f919d5cf7f4c62994d200763aecaafd59e0d203cbc85218ef36bfaa353fc53cad58dca6e5301263f18f4f2cd177e089228979853e10bb15f7d47ea41d53417abfd48c38ab1e"}) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, 0xffffffffffffffff, 0x0) 12:31:48 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c014) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip_vti0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!-&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3d}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040090) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x2400c080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6f0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan3\x00'}) getegid() 12:31:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:31:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:31:48 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c014) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip_vti0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!-&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3d}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040090) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x2400c080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6f0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24) getegid() 12:31:48 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "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"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc803) r6 = semget(0x1, 0x4, 0x8) semctl$GETNCNT(r6, 0x0, 0xe, &(0x7f0000001000)=""/140) 12:31:48 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) r4 = getegid() getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@privport}, {@noextend}, {@version_u}, {@cache_mmap}, {@version_9p2000}], [{@fsname={'fsname', 0x3d, '*\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '!/#'}}, {@subj_user}, {@smackfsroot={'smackfsroot', 0x3d, './cgroup.net/syz1\x00'}}, {@uid_gt={'uid>', r5}}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}}) r6 = syz_open_dev$hidraw(&(0x7f0000000400), 0x3, 0x80000) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = socket$inet_icmp(0x2, 0x2, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000440)=[r6, r7, r8, r1, r9, r2, r0, r3], 0x8) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x480, 0x0) ioctl$RTC_UIE_OFF(r10, 0x7004) r11 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r11, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[r6, r10, 0xffffffffffffffff]}, 0x3) 12:31:48 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c014) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip_vti0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!-&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3d}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040090) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x2400c080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan3\x00'}) getegid() 12:31:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:31:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r7) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:31:48 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c014) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip_vti0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!-&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3d}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040090) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x2400c080) getegid() [ 134.337199] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.337981] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.339225] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.339890] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.341060] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 134.341730] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 134.342383] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 134.343841] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 135.622727] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.390640] Bluetooth: hci7: command 0x0c1a tx timeout [ 136.391861] Bluetooth: hci6: command 0x0c1a tx timeout [ 136.392570] Bluetooth: hci5: command 0x0c1a tx timeout [ 136.392969] Bluetooth: hci4: command 0x0c1a tx timeout [ 136.393850] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.394941] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.395800] Bluetooth: hci1: command 0x0c1a tx timeout 12:31:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:31:58 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x907}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x47}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:31:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000002c0)=""/211) r3 = syz_open_dev$rtc(&(0x7f00000003c0), 0x9, 0x400000) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$RTC_UIE_ON(r3, 0x7003) write$hidraw(r1, &(0x7f0000000400)="f1619a837b8c46e4c0935db9dd10730e3754303e35e56a0790c84594ad6ace7c394091b1cf544ef5081642356e3323373034df33e5721825994b2ebc1128ec8956769af3bf1988532db93fd7e8", 0x4d) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000004c0)) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) 12:31:58 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "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"}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, 0xffffffffffffffff, 0x0) 12:31:58 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c014) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip_vti0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!-&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x200}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3d}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4040090) getegid() 12:31:58 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "fa043f38c385a3c1b5b21a59a8f7ccefba5c93b5c16300f92b37bc7374847c6be75bf3d17d72d53033a601640a42ef2303556b830f95161ad69347a34e55d3bb7123419fd651664d090facbe0f53822f1b333fc8f6da756b12126b497772d0455f72770fc8b5414935d4e8446765d4b7b9399a8771766dc9fb10ea82e2b03f0c448edc19843cebfda66dfbef4f36c422b4a23344d6baab33e2da78a232f2f6454f888b86bef07bf3d103149c0965e53f4ff8505dd7a367a256f74275a2c8478ffb881d801d2343858d2937a9bac03d5af3334617188f65443dfe76aea6b73b11437dfd362dc7e50aa9942219cd701b93500c8aa35df270ca6c57a1002260dbad7274464e5a46f607889a90849282ee60ab2f5b6592f402cac9be70fce9463a9f787b2ba5360559ddb96e85dbb5dfe1604984796442677d41a4f80c9bb83e1dbca483b4d4cf8beb8a12a4a024938eca47d7c70ace35ed960f57468373b24a3552501a1fcfe33ebc1ecebaec375137eef2c4a031a1598e5ba76603b37b1d3229c00d1d875293121a0e90366394588127ecd3659e37c3efc0d55e091e86b002ba47e4185562dd329751ef411add7a6c97bb43f078bf631fba2dfb963ccad24113b0f2e332158203e4163a10cf0d7bffee66621a1d0af6540810d6f85b3cf2d0f7cc7fd34e68091e738f8fd238d8d3a0bf00f3dcb6cbebfa9eddc817b09a9a0566774969f4686e675323cfa749ee8e3bbe3590ddab4bc93cda2a62129220d3a1e643af9a2224053c0efae0fd0c34ddf8d1a9c64a5c8e334fa82ddc6b9aec558361feef81bc6633d90f217b49b0bb0faf4dccfb7b3624d095eb2d0fba788eb4d2aac44b1700cd54d9af4cc2729f2b6b7e39efaee3d0e133e438e7568b2e60bbcda2d54eb871ae132fbe8e4d6768bdbe0c562d1679a196e8aa2df1a2d7dab1ea2b3c980f150574882a3cc9e50ac82dd93231d57a23e04b3c529da9645b8a924f4bb1f62dbbff4174a469f002e4daa42fa7f8cdea8d6aa38cf0cde0272493b1beba0c33f43e33a246e251ae7dd1e8ab73b6f3ab6fb3172423b551566a07746acacae60e897f6275bc66ee6fe0dcb3b9007f44b66f9ac6cb0cd50aaa1b111decb6d6cab9bdae5dc96f0cc267539abc4ce110fbda76f5b23bb46a814bf856abb2ec19091527c4808a55185a51c2fe85685d7117b10b7a241958a3a37b781c4ad31bea5cbf4142ca906bc69c74c79f3f0a10a33355f3a77c92c256a3790b326e8972a51db16bd98906e68cc1f156db66e3409d2eec5ac81cb41691706286590221fcdcc8fab1cb4d7022d3353f9542fb6d40b472146019e43b621f3a930f687e7a770f8582f09af3c38af9716c645192dbc93d3d75975e5d59cfcf4cd0f4b55ff7d6596805ea71dffeb5a7ff5d178ab9eb32e6a7df989375f79107b8b0b89b5798ae2dfed8c3c415f456ba07409785e5efd7628529fe013ec6957794ea051da786fa13303799a1af49cff0eb44bbea1f98eca53c2dd4dbb9531d771d9860afd7ae1dd8dd7badc45dbc5927fa111d302f7f53ab1afdf1de906c84f4f5236972991f6dc4e8601bffe29281abc77323c20bd80ed920ed9cec8d93cd45f1ff8659c012acf7e6e2f016cb82cfd051847717674c81434fe4fcc768bc568fba9e5df0c8bc67a19b1e6e162e508d25b2ebac361512d149a8c476e7ef1e050e0145f90ed1b040ea78bd2b61e73814126bfd06af94eaf9b1fe3465c07b26a7c2e0c7f792b24da96b138b2e090d70888d5d99385c721d042c877e7f8b08c7a9e398a135f13ca3166f7fb6f49d07fe22cdd19dba80c931cbe00378fca4105247f4636c9b2117343a8859b3e5fe42b26afe6797cee0c1d72ef3e01ac404443b399cd013694e9cdd53f8d8316b087d00366e259a69485a4b6511834d2ec5e98072aa7d6519929bf94a39baa37c54534dd27364d6ff1d2c999eb27a57fbe1cbef688b56e28440aec2aed993de9cfab6fc9f8fac449a43a6a222a7d15dd7a3517fed501c49db23c954668a5877a97d51bdd5b0e07c9ce359262e7e53a699922f86f431a12a08f70930fd2e08e90740785ae5a283c9e43819e25373406c64a8f3a98fb88c7630743807901763690eefc762b269b436a35e76f2ead8586d534bbd2402f9f0e4f33b7e6ff9cd27394acdfb2b9bdf222de4315e7c578983e0d0d8d86a1e5d61e10639fa41405162f413ef679a4bb860c8bd2efde07278fef11142571182b6cf5b4c2ed8973097f9cb8ca402fae338f9e89d223acfc4fad770c4e1000f08ee1edd36c1e0087864e9471144ba403a79eb15eafe82725ccf63b8a5bb1ae8c4675d6af3a7a327adceea13f9aa2b9ae054d011cda4d99a67eb0667ba554dd374bd270df371f2c47a00237f22355faba7e7623a790aa21cff81874a553ae9d6b2cbd349ef3602c7ea16df6ea67b25b032bba4c4ed13cf180a1d1ba5d695d446a0d6a20922a54bc5d93a553183302ac27ae03c038e97c1b94adffc603176ab1df16c0711276b1ade9486f6c683829b4a49b5e49d1a094d4fb8a2929d2039eb013a9d241c3cb5e19f67d047af41b711ed7c895a67909a23f3f33f86c8b58e160f5d2b80585b707ba64c85042cfb1fb3df9fdf5007b8bf4cddc4b8167856956cacde7bda2fd9dac5513f43b0cc0eccdf22dcd98bd95d00f2ace87cdde5eb229701349ee587360233bcfab68248b7e76e85e72cfe2c4ab47ed21a8ee9ae183ee66436b167396069822c923f1d716f38558442995791554dbc58d5fe4d52450bb5d155244d7bcd1404ed55ba24049fa987bc4916a1d3661bd0a179646eda50716b8e3c889e29059bd67ef19dfcb79f8c9274d54d1a3c4dc9486d6dab972dd4d5b017139629182657eb2844a357a5dd833481ced2e9a4f48092485ce82d8f59b2088f7cebe0ed9424394a7dc08c99de9994d0a4bd66095555983413a73dac573561a0a508008adcc9a2b30a56a894b77cf1c878116224b6d163667ea4f35877b843b6d890c44442362e46aaebf1604652c0088b01a9be6038561ddac32381a5e736fd803eba9113584232fd4b70f0d553bce2ba9567a3b534e2a535f8a8948b0ef9f03cb6874b5a224caf69135a75531a39c99d3099055c9a3946266ab0e2536f475d7261768e52365635bcbe465f96ff4bf04b413938794f8761bcb872c9c0ba914c24a780957a0a427d70637867857b0b4be20c996bcddf363d69f805b70ded600631fd5a0dae3f8dc36e902bb962338057ff75d0a322c974eba9cceeace0c75ae64ca11cd8daf7477c5f3c56d30b7f633a4b21b0cd01643c44689866622eb2df34a646c788aea01a716f69d8c1dc81f7db80e20c8e229e83ec9306b6da0b639ae2357f22898fd1aff8ed756a76da13038d6bbd2ddf4d9085e6e83c8912993154faa5af1de57441d7bdee21726539b6d4b387daa54b2c374c35718313257feb621a0e3bedc21431da2f2b3925a3b33eed99d08dbe3f0ba6001167808cb00ac0c71745775f72df22eb7889d737beae32922437fe3bd48f44e23eb199a432812d01808f30c8703aad0b81173f0129b12e40787823d3ca4af8dd5d0c591290a56ce041fc4946f9d54f0bc97c876a74ef6371a39f898eaf5b6a9762c2bbe270c51805d67c4df19eb827b6caa5cdd18d566783a4fded7483f4aa99c1e1cd16a744760d9fc3ea4ab569d7e22ee2655006efc126b581c1821452f70e871d0696ad968d990b72a9fa32e60ec6c890eaac935e40e468b41f241709221a0ce01a05c429e3a380784baac20387db02a775d668ac2d02f8b70bb8723b0c76ea652bcdca9a9a567abc88658214ceeb578b1a18caa270b4db2b705fa393779859d31f919d5cf7f4c62994d200763aecaafd59e0d203cbc85218ef36bfaa353fc53cad58dca6e5301263f18f4f2cd177e089228979853e10bb15f7d47ea41d53417abfd48c38ab1e"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc803) semget(0x1, 0x4, 0x8) 12:31:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r7) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:31:58 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) r4 = getegid() getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@privport}, {@noextend}, {@version_u}, {@cache_mmap}, {@version_9p2000}], [{@fsname={'fsname', 0x3d, '*\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '!/#'}}, {@subj_user}, {@smackfsroot={'smackfsroot', 0x3d, './cgroup.net/syz1\x00'}}, {@uid_gt={'uid>', r5}}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}}) r6 = syz_open_dev$hidraw(&(0x7f0000000400), 0x3, 0x80000) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = socket$inet_icmp(0x2, 0x2, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000440)=[r6, r7, r8, r1, r9, r2, r0, r3], 0x8) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x480, 0x0) r11 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r11, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[r6, r10, 0xffffffffffffffff]}, 0x3) 12:31:58 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c014) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'ip_vti0\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x42}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '!-&\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) getegid() 12:31:58 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, 0xffffffffffffffff, 0x0) [ 143.771441] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.773072] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.774806] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.777225] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.779227] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 143.781460] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 143.783930] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 143.785458] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 145.030657] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.798647] Bluetooth: hci7: command 0x0c1a tx timeout [ 145.799763] Bluetooth: hci6: command 0x0c1a tx timeout [ 145.800887] Bluetooth: hci5: command 0x0c1a tx timeout [ 145.801562] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.801871] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.802338] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.803288] Bluetooth: hci1: command 0x0c1a tx timeout 12:32:06 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "fa043f38c385a3c1b5b21a59a8f7ccefba5c93b5c16300f92b37bc7374847c6be75bf3d17d72d53033a601640a42ef2303556b830f95161ad69347a34e55d3bb7123419fd651664d090facbe0f53822f1b333fc8f6da756b12126b497772d0455f72770fc8b5414935d4e8446765d4b7b9399a8771766dc9fb10ea82e2b03f0c448edc19843cebfda66dfbef4f36c422b4a23344d6baab33e2da78a232f2f6454f888b86bef07bf3d103149c0965e53f4ff8505dd7a367a256f74275a2c8478ffb881d801d2343858d2937a9bac03d5af3334617188f65443dfe76aea6b73b11437dfd362dc7e50aa9942219cd701b93500c8aa35df270ca6c57a1002260dbad7274464e5a46f607889a90849282ee60ab2f5b6592f402cac9be70fce9463a9f787b2ba5360559ddb96e85dbb5dfe1604984796442677d41a4f80c9bb83e1dbca483b4d4cf8beb8a12a4a024938eca47d7c70ace35ed960f57468373b24a3552501a1fcfe33ebc1ecebaec375137eef2c4a031a1598e5ba76603b37b1d3229c00d1d875293121a0e90366394588127ecd3659e37c3efc0d55e091e86b002ba47e4185562dd329751ef411add7a6c97bb43f078bf631fba2dfb963ccad24113b0f2e332158203e4163a10cf0d7bffee66621a1d0af6540810d6f85b3cf2d0f7cc7fd34e68091e738f8fd238d8d3a0bf00f3dcb6cbebfa9eddc817b09a9a0566774969f4686e675323cfa749ee8e3bbe3590ddab4bc93cda2a62129220d3a1e643af9a2224053c0efae0fd0c34ddf8d1a9c64a5c8e334fa82ddc6b9aec558361feef81bc6633d90f217b49b0bb0faf4dccfb7b3624d095eb2d0fba788eb4d2aac44b1700cd54d9af4cc2729f2b6b7e39efaee3d0e133e438e7568b2e60bbcda2d54eb871ae132fbe8e4d6768bdbe0c562d1679a196e8aa2df1a2d7dab1ea2b3c980f150574882a3cc9e50ac82dd93231d57a23e04b3c529da9645b8a924f4bb1f62dbbff4174a469f002e4daa42fa7f8cdea8d6aa38cf0cde0272493b1beba0c33f43e33a246e251ae7dd1e8ab73b6f3ab6fb3172423b551566a07746acacae60e897f6275bc66ee6fe0dcb3b9007f44b66f9ac6cb0cd50aaa1b111decb6d6cab9bdae5dc96f0cc267539abc4ce110fbda76f5b23bb46a814bf856abb2ec19091527c4808a55185a51c2fe85685d7117b10b7a241958a3a37b781c4ad31bea5cbf4142ca906bc69c74c79f3f0a10a33355f3a77c92c256a3790b326e8972a51db16bd98906e68cc1f156db66e3409d2eec5ac81cb41691706286590221fcdcc8fab1cb4d7022d3353f9542fb6d40b472146019e43b621f3a930f687e7a770f8582f09af3c38af9716c645192dbc93d3d75975e5d59cfcf4cd0f4b55ff7d6596805ea71dffeb5a7ff5d178ab9eb32e6a7df989375f79107b8b0b89b5798ae2dfed8c3c415f456ba07409785e5efd7628529fe013ec6957794ea051da786fa13303799a1af49cff0eb44bbea1f98eca53c2dd4dbb9531d771d9860afd7ae1dd8dd7badc45dbc5927fa111d302f7f53ab1afdf1de906c84f4f5236972991f6dc4e8601bffe29281abc77323c20bd80ed920ed9cec8d93cd45f1ff8659c012acf7e6e2f016cb82cfd051847717674c81434fe4fcc768bc568fba9e5df0c8bc67a19b1e6e162e508d25b2ebac361512d149a8c476e7ef1e050e0145f90ed1b040ea78bd2b61e73814126bfd06af94eaf9b1fe3465c07b26a7c2e0c7f792b24da96b138b2e090d70888d5d99385c721d042c877e7f8b08c7a9e398a135f13ca3166f7fb6f49d07fe22cdd19dba80c931cbe00378fca4105247f4636c9b2117343a8859b3e5fe42b26afe6797cee0c1d72ef3e01ac404443b399cd013694e9cdd53f8d8316b087d00366e259a69485a4b6511834d2ec5e98072aa7d6519929bf94a39baa37c54534dd27364d6ff1d2c999eb27a57fbe1cbef688b56e28440aec2aed993de9cfab6fc9f8fac449a43a6a222a7d15dd7a3517fed501c49db23c954668a5877a97d51bdd5b0e07c9ce359262e7e53a699922f86f431a12a08f70930fd2e08e90740785ae5a283c9e43819e25373406c64a8f3a98fb88c7630743807901763690eefc762b269b436a35e76f2ead8586d534bbd2402f9f0e4f33b7e6ff9cd27394acdfb2b9bdf222de4315e7c578983e0d0d8d86a1e5d61e10639fa41405162f413ef679a4bb860c8bd2efde07278fef11142571182b6cf5b4c2ed8973097f9cb8ca402fae338f9e89d223acfc4fad770c4e1000f08ee1edd36c1e0087864e9471144ba403a79eb15eafe82725ccf63b8a5bb1ae8c4675d6af3a7a327adceea13f9aa2b9ae054d011cda4d99a67eb0667ba554dd374bd270df371f2c47a00237f22355faba7e7623a790aa21cff81874a553ae9d6b2cbd349ef3602c7ea16df6ea67b25b032bba4c4ed13cf180a1d1ba5d695d446a0d6a20922a54bc5d93a553183302ac27ae03c038e97c1b94adffc603176ab1df16c0711276b1ade9486f6c683829b4a49b5e49d1a094d4fb8a2929d2039eb013a9d241c3cb5e19f67d047af41b711ed7c895a67909a23f3f33f86c8b58e160f5d2b80585b707ba64c85042cfb1fb3df9fdf5007b8bf4cddc4b8167856956cacde7bda2fd9dac5513f43b0cc0eccdf22dcd98bd95d00f2ace87cdde5eb229701349ee587360233bcfab68248b7e76e85e72cfe2c4ab47ed21a8ee9ae183ee66436b167396069822c923f1d716f38558442995791554dbc58d5fe4d52450bb5d155244d7bcd1404ed55ba24049fa987bc4916a1d3661bd0a179646eda50716b8e3c889e29059bd67ef19dfcb79f8c9274d54d1a3c4dc9486d6dab972dd4d5b017139629182657eb2844a357a5dd833481ced2e9a4f48092485ce82d8f59b2088f7cebe0ed9424394a7dc08c99de9994d0a4bd66095555983413a73dac573561a0a508008adcc9a2b30a56a894b77cf1c878116224b6d163667ea4f35877b843b6d890c44442362e46aaebf1604652c0088b01a9be6038561ddac32381a5e736fd803eba9113584232fd4b70f0d553bce2ba9567a3b534e2a535f8a8948b0ef9f03cb6874b5a224caf69135a75531a39c99d3099055c9a3946266ab0e2536f475d7261768e52365635bcbe465f96ff4bf04b413938794f8761bcb872c9c0ba914c24a780957a0a427d70637867857b0b4be20c996bcddf363d69f805b70ded600631fd5a0dae3f8dc36e902bb962338057ff75d0a322c974eba9cceeace0c75ae64ca11cd8daf7477c5f3c56d30b7f633a4b21b0cd01643c44689866622eb2df34a646c788aea01a716f69d8c1dc81f7db80e20c8e229e83ec9306b6da0b639ae2357f22898fd1aff8ed756a76da13038d6bbd2ddf4d9085e6e83c8912993154faa5af1de57441d7bdee21726539b6d4b387daa54b2c374c35718313257feb621a0e3bedc21431da2f2b3925a3b33eed99d08dbe3f0ba6001167808cb00ac0c71745775f72df22eb7889d737beae32922437fe3bd48f44e23eb199a432812d01808f30c8703aad0b81173f0129b12e40787823d3ca4af8dd5d0c591290a56ce041fc4946f9d54f0bc97c876a74ef6371a39f898eaf5b6a9762c2bbe270c51805d67c4df19eb827b6caa5cdd18d566783a4fded7483f4aa99c1e1cd16a744760d9fc3ea4ab569d7e22ee2655006efc126b581c1821452f70e871d0696ad968d990b72a9fa32e60ec6c890eaac935e40e468b41f241709221a0ce01a05c429e3a380784baac20387db02a775d668ac2d02f8b70bb8723b0c76ea652bcdca9a9a567abc88658214ceeb578b1a18caa270b4db2b705fa393779859d31f919d5cf7f4c62994d200763aecaafd59e0d203cbc85218ef36bfaa353fc53cad58dca6e5301263f18f4f2cd177e089228979853e10bb15f7d47ea41d53417abfd48c38ab1e"}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x30}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc803) 12:32:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:32:06 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x907}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000) openat$hpet(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:32:06 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, 0xffffffffffffffff, 0x0) 12:32:06 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r0, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x400c014) getegid() 12:32:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000002c0)=""/211) r3 = syz_open_dev$rtc(&(0x7f00000003c0), 0x9, 0x400000) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$RTC_UIE_ON(r3, 0x7003) write$hidraw(r1, &(0x7f0000000400)="f1619a837b8c46e4c0935db9dd10730e3754303e35e56a0790c84594ad6ace7c394091b1cf544ef5081642356e3323373034df33e5721825994b2ebc1128ec8956769af3bf1988532db93fd7e8", 0x4d) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) 12:32:06 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) r4 = getegid() getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@privport}, {@noextend}, {@version_u}, {@cache_mmap}, {@version_9p2000}], [{@fsname={'fsname', 0x3d, '*\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '!/#'}}, {@subj_user}, {@smackfsroot={'smackfsroot', 0x3d, './cgroup.net/syz1\x00'}}, {@uid_gt={'uid>', r5}}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}}) r6 = syz_open_dev$hidraw(&(0x7f0000000400), 0x3, 0x80000) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = socket$inet_icmp(0x2, 0x2, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000440)=[r6, r7, r8, r1, r9, r2, r0, r3], 0x8) r10 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r10, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:32:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r7) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:32:06 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, 0xffffffffffffffff, 0x0) 12:32:06 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) getegid() 12:32:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:32:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40804) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:32:07 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) r4 = getegid() getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@privport}, {@noextend}, {@version_u}, {@cache_mmap}, {@version_9p2000}], [{@fsname={'fsname', 0x3d, '*\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '!/#'}}, {@subj_user}, {@smackfsroot={'smackfsroot', 0x3d, './cgroup.net/syz1\x00'}}, {@uid_gt={'uid>', r5}}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}}) r6 = syz_open_dev$hidraw(&(0x7f0000000400), 0x3, 0x80000) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r7 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:32:07 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x81) getegid() 12:32:07 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, 0xffffffffffffffff, 0x0) [ 152.551551] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.552342] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.553258] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.554027] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.554770] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 152.555512] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 152.556812] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 152.557900] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 153.798608] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.566714] Bluetooth: hci7: command 0x0c1a tx timeout [ 154.567857] Bluetooth: hci6: command 0x0c1a tx timeout [ 154.568860] Bluetooth: hci5: command 0x0c1a tx timeout [ 154.569566] Bluetooth: hci4: command 0x0c1a tx timeout [ 154.569887] Bluetooth: hci3: command 0x0c1a tx timeout [ 154.570306] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.571650] Bluetooth: hci1: command 0x0c1a tx timeout 12:32:15 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) r4 = getegid() getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@privport}, {@noextend}, {@version_u}, {@cache_mmap}, {@version_9p2000}], [{@fsname={'fsname', 0x3d, '*\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '!/#'}}, {@subj_user}, {@smackfsroot={'smackfsroot', 0x3d, './cgroup.net/syz1\x00'}}, {@uid_gt={'uid>', r5}}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}}) r6 = syz_open_dev$hidraw(&(0x7f0000000400), 0x3, 0x80000) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_icmp(0x2, 0x2, 0x1) r7 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:32:15 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x907}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:32:15 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f00000003c0)={0xaf3, "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"}) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) 12:32:15 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r1, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, 0xffffffffffffffff, 0x0) 12:32:15 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7, 0x80, 0x8001, 0x9000, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end]}}}}}) getegid() 12:32:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:32:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000002c0)=""/211) r3 = syz_open_dev$rtc(&(0x7f00000003c0), 0x9, 0x400000) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$RTC_UIE_ON(r3, 0x7003) write$hidraw(r1, &(0x7f0000000400)="f1619a837b8c46e4c0935db9dd10730e3754303e35e56a0790c84594ad6ace7c394091b1cf544ef5081642356e3323373034df33e5721825994b2ebc1128ec8956769af3bf1988532db93fd7e8", 0x4d) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) 12:32:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:32:15 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), r4) [ 161.209577] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.211610] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.213004] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.214035] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.215973] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 161.216965] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 161.218424] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 161.220022] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 162.438662] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.270676] Bluetooth: hci7: command 0x0c1a tx timeout [ 163.271747] Bluetooth: hci6: command 0x0c1a tx timeout [ 163.272913] Bluetooth: hci5: command 0x0c1a tx timeout [ 163.273594] Bluetooth: hci4: command 0x0c1a tx timeout [ 163.273891] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.274639] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.276294] Bluetooth: hci1: command 0x0c1a tx timeout 12:32:24 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, 0xffffffffffffffff, 0x0) 12:32:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:32:24 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) read$hidraw(r3, &(0x7f0000000340)=""/57, 0x39) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), 0xffffffffffffffff) 12:32:24 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x907}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:32:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000002c0)=""/211) r3 = syz_open_dev$rtc(&(0x7f00000003c0), 0x9, 0x400000) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$RTC_UIE_ON(r3, 0x7003) write$hidraw(r1, &(0x7f0000000400)="f1619a837b8c46e4c0935db9dd10730e3754303e35e56a0790c84594ad6ace7c394091b1cf544ef5081642356e3323373034df33e5721825994b2ebc1128ec8956769af3bf1988532db93fd7e8", 0x4d) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 12:32:24 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) r4 = getegid() getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@privport}, {@noextend}, {@version_u}, {@cache_mmap}, {@version_9p2000}], [{@fsname={'fsname', 0x3d, '*\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '!/#'}}, {@subj_user}, {@smackfsroot={'smackfsroot', 0x3d, './cgroup.net/syz1\x00'}}, {@uid_gt={'uid>', r5}}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}}) r6 = syz_open_dev$hidraw(&(0x7f0000000400), 0x3, 0x80000) socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:32:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:32:24 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) getegid() 12:32:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000801) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:32:24 executing program 4: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) getegid() 12:32:24 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) r4 = getegid() getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@privport}, {@noextend}, {@version_u}, {@cache_mmap}, {@version_9p2000}], [{@fsname={'fsname', 0x3d, '*\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '!/#'}}, {@subj_user}, {@smackfsroot={'smackfsroot', 0x3d, './cgroup.net/syz1\x00'}}, {@uid_gt={'uid>', r5}}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}}) r6 = syz_open_dev$hidraw(&(0x7f0000000400), 0x3, 0x80000) r7 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:32:24 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, 0xffffffffffffffff, 0x0) 12:32:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0xf5d55a120036086b) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:32:25 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8240, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), 0xffffffffffffffff) 12:32:25 executing program 4: getegid() 12:32:25 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) r4 = getegid() getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@nodevmap}, {@privport}, {@noextend}, {@version_u}, {@cache_mmap}, {@version_9p2000}], [{@fsname={'fsname', 0x3d, '*\\'}}, {@smackfsroot={'smackfsroot', 0x3d, '!/#'}}, {@subj_user}, {@smackfsroot={'smackfsroot', 0x3d, './cgroup.net/syz1\x00'}}, {@uid_gt={'uid>', r5}}, {@fowner_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}]}}) r6 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:32:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:32:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:32:25 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, 0xffffffffffffffff, 0x0) [ 170.405196] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 170.406385] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.407520] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 170.411003] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 170.413199] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 170.414885] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 170.417415] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 170.419628] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 171.654649] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.422672] Bluetooth: hci7: command 0x0c1a tx timeout [ 172.423744] Bluetooth: hci6: command 0x0c1a tx timeout [ 172.424733] Bluetooth: hci5: command 0x0c1a tx timeout [ 172.425594] Bluetooth: hci4: command 0x0c1a tx timeout [ 172.425696] Bluetooth: hci3: command 0x0c1a tx timeout [ 172.426507] Bluetooth: hci2: command 0x0c1a tx timeout [ 172.426596] Bluetooth: hci1: command 0x0c1a tx timeout 12:32:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000002c0)=""/211) r3 = syz_open_dev$rtc(&(0x7f00000003c0), 0x9, 0x400000) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$RTC_UIE_ON(r3, 0x7003) write$hidraw(r1, &(0x7f0000000400)="f1619a837b8c46e4c0935db9dd10730e3754303e35e56a0790c84594ad6ace7c394091b1cf544ef5081642356e3323373034df33e5721825994b2ebc1128ec8956769af3bf1988532db93fd7e8", 0x4d) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 12:32:33 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:32:33 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) getegid() getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) r4 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:32:33 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, 0xffffffffffffffff, 0x0) 12:32:33 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:32:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:32:33 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r2, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), 0xffffffffffffffff) 12:32:33 executing program 4: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x907}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:32:33 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) getegid() r4 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:32:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:32:33 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r2, 0x1) r4 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:32:33 executing program 7: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, 0xffffffffffffffff, 0x0) 12:32:33 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r1, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), 0xffffffffffffffff) 12:32:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000640)=r6, 0x1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:32:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:32:33 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) io_uring_setup(0x2567, &(0x7f00000000c0)={0x0, 0xed8f, 0x10, 0x2, 0x9}) r3 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) [ 178.886827] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 178.887579] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 178.888192] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 178.889321] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 178.890002] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 178.890863] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 178.891454] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 178.892303] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 180.103560] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.935561] Bluetooth: hci7: command 0x0c1a tx timeout [ 180.935621] Bluetooth: hci6: command 0x0c1a tx timeout [ 180.936080] Bluetooth: hci5: command 0x0c1a tx timeout [ 180.936097] Bluetooth: hci4: command 0x0c1a tx timeout [ 180.937295] Bluetooth: hci3: command 0x0c1a tx timeout [ 180.937503] Bluetooth: hci2: command 0x0c1a tx timeout [ 180.938505] Bluetooth: hci1: command 0x0c1a tx timeout 12:32:42 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:32:42 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800001, 0x50, 0xffffffffffffffff, 0x0) 12:32:42 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = eventfd2(0x40, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x9) r3 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:32:42 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r1, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), 0xffffffffffffffff) 12:32:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000002c0)=""/211) r3 = syz_open_dev$rtc(&(0x7f00000003c0), 0x9, 0x400000) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$RTC_UIE_ON(r3, 0x7003) write$hidraw(r1, &(0x7f0000000400)="f1619a837b8c46e4c0935db9dd10730e3754303e35e56a0790c84594ad6ace7c394091b1cf544ef5081642356e3323373034df33e5721825994b2ebc1128ec8956769af3bf1988532db93fd7e8", 0x4d) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 12:32:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) eventfd(0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r6) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:32:42 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:32:42 executing program 4: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x907}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:32:42 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x0) 12:32:42 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:32:42 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) eventfd2(0x40, 0x80000) r0 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:32:42 executing program 7: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 12:32:42 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) write$hidraw(r1, &(0x7f0000000240)="c63a52aad59e77acc620105baa6a84e96163b18ac1b38382c164b22f995bdca5bb5e3f64d739a4c4fea0f033dd60cab207c439b63637adcbb3933ac4252b40af97b9d8cb055d251fd21f95ec7636e4cd506b32054816368f25df1a21f105e42a4a94396125fa07c5e29938ceb5cdd6f8be6e1b788037f55bb618e7decb0a61b3043bf24c8d185d5ae36a37047be193335b89f7904e0e64544eeff3c9a0aa1af716", 0xa1) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), 0xffffffffffffffff) 12:32:42 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) 12:32:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000002c0)=""/211) r3 = syz_open_dev$rtc(&(0x7f00000003c0), 0x9, 0x400000) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl$RTC_UIE_ON(r3, 0x7003) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) [ 188.263252] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.264799] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.267778] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.269364] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.280155] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.281658] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 188.282391] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 188.284266] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 189.511480] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.278613] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.279671] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.280693] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.343608] Bluetooth: hci7: command 0x0c1a tx timeout [ 190.344628] Bluetooth: hci6: command 0x0c1a tx timeout [ 190.345584] Bluetooth: hci5: command 0x0c1a tx timeout [ 190.345621] Bluetooth: hci4: command 0x0c1a tx timeout 12:32:50 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:32:50 executing program 4: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x907}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:32:50 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:32:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000002c0)=""/211) syz_open_dev$rtc(&(0x7f00000003c0), 0x9, 0x400000) ioctl$RTC_AIE_OFF(r2, 0x7002) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) 12:32:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r6) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:32:50 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x400140) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), 0xffffffffffffffff) 12:32:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) 12:32:50 executing program 7: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:32:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) 12:32:51 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) r0 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:32:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r6) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:32:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) 12:32:51 executing program 0: r0 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:32:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioctl$RTC_WIE_ON(r1, 0x700f) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000002c0)=""/211) syz_open_dev$rtc(&(0x7f00000003c0), 0x9, 0x400000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 12:32:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) 12:32:51 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) r0 = io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) r1 = io_uring_setup(0x5b1d, &(0x7f0000000180)={0x0, 0x3df4, 0x20, 0x0, 0x57, 0x0, r0}) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), 0xffffffffffffffff) 12:32:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r5 = syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r5, 0x10000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r6) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) [ 196.588139] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 196.588913] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.589495] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 196.590224] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 196.590861] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 196.591471] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 196.592276] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 196.592894] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 197.830592] Bluetooth: hci0: command 0x0c1a tx timeout [ 198.598607] Bluetooth: hci7: command 0x0c1a tx timeout [ 198.599222] Bluetooth: hci6: command 0x0c1a tx timeout [ 198.599929] Bluetooth: hci5: command 0x0c1a tx timeout [ 198.600486] Bluetooth: hci4: command 0x0c1a tx timeout [ 198.600564] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.601073] Bluetooth: hci2: command 0x0c1a tx timeout [ 198.601572] Bluetooth: hci1: command 0x0c1a tx timeout 12:33:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) 12:33:00 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:33:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioctl$RTC_WIE_ON(r1, 0x700f) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000002c0)=""/211) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 12:33:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r5) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:33:00 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) io_uring_setup(0x3e82, &(0x7f0000000100)={0x0, 0x556e, 0x22, 0x2, 0x316}) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), 0xffffffffffffffff) 12:33:00 executing program 4: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x907}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000) 12:33:00 executing program 7: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:00 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:00 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:33:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) 12:33:00 executing program 0: r0 = io_uring_setup(0x0, &(0x7f0000000540)={0x0, 0xbb2d, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:33:00 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040841) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), 0xffffffffffffffff) 12:33:00 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 12:33:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) eventfd(0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r5) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:33:00 executing program 0: r0 = io_uring_setup(0x3995, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:33:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioctl$RTC_WIE_ON(r1, 0x700f) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 12:33:00 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) [ 205.749110] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 205.750110] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 205.751665] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 205.752936] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 205.753870] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 205.755490] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 205.756795] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 205.758290] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 206.982627] Bluetooth: hci0: command 0x0c1a tx timeout [ 207.750622] Bluetooth: hci1: command 0x0c1a tx timeout [ 207.814755] Bluetooth: hci7: command 0x0c1a tx timeout [ 207.815592] Bluetooth: hci6: command 0x0c1a tx timeout [ 207.815871] Bluetooth: hci5: command 0x0c1a tx timeout [ 207.816332] Bluetooth: hci4: command 0x0c1a tx timeout [ 207.817412] Bluetooth: hci3: command 0x0c1a tx timeout [ 207.817786] Bluetooth: hci2: command 0x0c1a tx timeout 12:33:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) eventfd(0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r5) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:33:08 executing program 4: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x907}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000) 12:33:08 executing program 7: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:08 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 12:33:08 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) ioctl$RTC_WIE_ON(r1, 0x700f) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 12:33:08 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:08 executing program 0: r0 = io_uring_setup(0x3995, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:33:08 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), 0xffffffffffffffff) 12:33:08 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 12:33:08 executing program 0: r0 = io_uring_setup(0x3995, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:33:08 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 12:33:08 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), 0xffffffffffffffff) 12:33:08 executing program 0: r0 = io_uring_setup(0x3995, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x28}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:33:08 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) bind$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 12:33:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) eventfd(0x6) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r5) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) [ 214.483832] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 214.493457] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.494853] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.497267] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.499142] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 214.501047] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 214.502975] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 214.504946] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 215.751573] Bluetooth: hci0: command 0x0c1a tx timeout [ 216.519602] Bluetooth: hci7: command 0x0c1a tx timeout [ 216.519716] Bluetooth: hci6: command 0x0c1a tx timeout [ 216.520267] Bluetooth: hci5: command 0x0c1a tx timeout [ 216.521295] Bluetooth: hci4: command 0x0c1a tx timeout [ 216.521815] Bluetooth: hci3: command 0x0c1a tx timeout [ 216.522730] Bluetooth: hci2: command 0x0c1a tx timeout [ 216.523281] Bluetooth: hci1: command 0x0c1a tx timeout 12:33:17 executing program 0: r0 = io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:33:17 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 12:33:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:33:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 12:33:17 executing program 7: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) 12:33:17 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:17 executing program 4: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x907}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20000) 12:33:17 executing program 6: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), 0xffffffffffffffff) 12:33:17 executing program 5: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:17 executing program 6: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000f00), 0xffffffffffffffff) 12:33:17 executing program 0: io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:33:17 executing program 6: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 12:33:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/vcs\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048845}, 0x4008000) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) [ 223.221574] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 223.222293] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 223.223895] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 223.225101] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 223.225790] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 223.226427] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 223.227962] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 223.229146] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 224.454636] Bluetooth: hci0: command 0x0c1a tx timeout [ 225.222671] Bluetooth: hci1: command 0x0c1a tx timeout [ 225.286673] Bluetooth: hci7: command 0x0c1a tx timeout [ 225.287560] Bluetooth: hci6: command 0x0c1a tx timeout [ 225.287704] Bluetooth: hci5: command 0x0c1a tx timeout [ 225.288104] Bluetooth: hci4: command 0x0c1a tx timeout [ 225.289134] Bluetooth: hci3: command 0x0c1a tx timeout [ 225.289492] Bluetooth: hci2: command 0x0c1a tx timeout 12:33:26 executing program 0: io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:33:26 executing program 4: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:26 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:33:26 executing program 7: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) 12:33:26 executing program 5: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) 12:33:26 executing program 6: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 12:33:26 executing program 0: io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000640)={0x10000, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:33:26 executing program 6: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 12:33:27 executing program 0: r0 = io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 12:33:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x501000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) 12:33:27 executing program 0: r0 = io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 12:33:27 executing program 6: r0 = io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 12:33:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:33:27 executing program 0: r0 = io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 12:33:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x10, 0xa6, 0x10000, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x66, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0xdb, 0x0, 0x0, [0x1, 0x4, 0x80000001]}, @timestamp={0x44, 0xc, 0xf7, 0x0, 0x8, [0x2, 0x8001]}, @noop, @cipso={0x86, 0x4e, 0x1, [{0x2, 0xd, "9601666cd53befffb623ba"}, {0x2, 0x11, "75c3600d015e141dcd87727824a5ce"}, {0x6, 0x6, "cd943791"}, {0x5, 0x12, "7ba5c07d1790271759cc4f50d01e675b"}, {0x5, 0x12, "acc01e875f9f8bddc2e87b55cd5f0651"}]}]}}}}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) [ 232.509680] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 232.510884] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 232.511939] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 232.513034] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 232.514077] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 232.515190] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 232.518719] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 232.520354] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 233.799578] Bluetooth: hci0: command 0x0c1a tx timeout [ 234.566723] Bluetooth: hci7: command 0x0c1a tx timeout [ 234.567973] Bluetooth: hci6: command 0x0c1a tx timeout [ 234.568587] Bluetooth: hci5: command 0x0c1a tx timeout [ 234.569771] Bluetooth: hci4: command 0x0c1a tx timeout [ 234.569781] Bluetooth: hci3: command 0x0c1a tx timeout [ 234.570612] Bluetooth: hci2: command 0x0c1a tx timeout [ 234.571565] Bluetooth: hci1: command 0x0c1a tx timeout 12:33:36 executing program 4: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:33:36 executing program 5: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:36 executing program 6: r0 = io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 12:33:36 executing program 0: r0 = io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) 12:33:36 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:36 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 12:33:36 executing program 7: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) 12:33:36 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 12:33:36 executing program 6: r0 = io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 12:33:36 executing program 0: r0 = io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 12:33:36 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:36 executing program 6: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) 12:33:36 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 12:33:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000080}, 0x8844) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:33:36 executing program 0: r0 = io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) [ 242.018236] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 242.021000] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 242.023044] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 242.024813] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 242.027493] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 242.034493] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 242.035780] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 242.036890] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 243.270600] Bluetooth: hci0: command 0x0c1a tx timeout [ 244.038661] Bluetooth: hci6: command 0x0c1a tx timeout [ 244.039917] Bluetooth: hci7: command 0x0c1a tx timeout [ 244.041049] Bluetooth: hci5: command 0x0c1a tx timeout [ 244.042183] Bluetooth: hci4: command 0x0c1a tx timeout [ 244.042600] Bluetooth: hci3: command 0x0c1a tx timeout [ 244.043324] Bluetooth: hci2: command 0x0c1a tx timeout [ 244.044368] Bluetooth: hci1: command 0x0c1a tx timeout 12:33:46 executing program 5: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) 12:33:46 executing program 7: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:46 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:46 executing program 6: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) 12:33:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:33:46 executing program 0: r0 = io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 12:33:46 executing program 4: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:46 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 12:33:46 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 12:33:46 executing program 0: r0 = io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 12:33:46 executing program 6: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) 12:33:46 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:46 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 12:33:46 executing program 6: r0 = io_uring_setup(0x0, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 12:33:46 executing program 0: r0 = io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff]}, 0x1) 12:33:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) [ 251.988895] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.989944] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.992033] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.993307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.994694] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 251.995946] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 251.996863] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 251.998470] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 253.254651] Bluetooth: hci0: command 0x0c1a tx timeout [ 254.023569] Bluetooth: hci7: command 0x0c1a tx timeout [ 254.024441] Bluetooth: hci6: command 0x0c1a tx timeout [ 254.025235] Bluetooth: hci5: command 0x0c1a tx timeout [ 254.026006] Bluetooth: hci4: command 0x0c1a tx timeout [ 254.026776] Bluetooth: hci3: command 0x0c1a tx timeout [ 254.026862] Bluetooth: hci2: command 0x0c1a tx timeout [ 254.027563] Bluetooth: hci1: command 0x0c1a tx timeout 12:33:55 executing program 6: r0 = io_uring_setup(0x0, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 12:33:55 executing program 7: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:55 executing program 0: r0 = io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)}, 0x0) 12:33:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:33:55 executing program 4: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:55 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:55 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 12:33:55 executing program 5: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) 12:33:55 executing program 0: r0 = io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)}, 0x0) 12:33:55 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 12:33:55 executing program 6: r0 = io_uring_setup(0x0, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 12:33:55 executing program 0: r0 = io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)}, 0x0) 12:33:55 executing program 1: getegid() getegid() syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:33:55 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 12:33:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:33:55 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:33:55 executing program 6: r0 = io_uring_setup(0x3995, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) [ 261.111350] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 261.112867] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.115471] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 261.117736] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.118481] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 261.119779] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 261.122265] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 261.123123] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 262.342613] Bluetooth: hci0: command 0x0c1a tx timeout [ 263.174634] Bluetooth: hci7: command 0x0c1a tx timeout [ 263.175698] Bluetooth: hci6: command 0x0c1a tx timeout [ 263.176648] Bluetooth: hci5: command 0x0c1a tx timeout [ 263.177631] Bluetooth: hci4: command 0x0c1a tx timeout [ 263.178566] Bluetooth: hci3: command 0x0c1a tx timeout [ 263.178593] Bluetooth: hci2: command 0x0c1a tx timeout [ 263.179054] Bluetooth: hci1: command 0x0c1a tx timeout 12:34:04 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 12:34:04 executing program 6: r0 = io_uring_setup(0x3995, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 12:34:04 executing program 5: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) 12:34:04 executing program 7: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:34:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:04 executing program 4: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:34:04 executing program 1: getegid() getegid() openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:34:04 executing program 6: r0 = io_uring_setup(0x3995, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 12:34:04 executing program 1: getegid() openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:34:04 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x202000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 12:34:04 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:34:04 executing program 6: io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) 12:34:04 executing program 1: openat$vcs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) [ 270.248623] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 270.250102] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 270.251495] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 270.254265] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 270.256265] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 270.257787] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 270.259495] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 270.261154] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 271.494701] Bluetooth: hci0: command 0x0c1a tx timeout [ 272.262659] Bluetooth: hci7: command 0x0c1a tx timeout [ 272.263968] Bluetooth: hci6: command 0x0c1a tx timeout [ 272.265195] Bluetooth: hci5: command 0x0c1a tx timeout [ 272.265600] Bluetooth: hci4: command 0x0c1a tx timeout [ 272.266403] Bluetooth: hci3: command 0x0c1a tx timeout [ 272.267434] Bluetooth: hci2: command 0x0c1a tx timeout [ 272.267493] Bluetooth: hci1: command 0x0c1a tx timeout 12:34:14 executing program 6: io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) 12:34:14 executing program 7: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:34:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:14 executing program 5: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) 12:34:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:14 executing program 4: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:34:14 executing program 1: openat$vcs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 12:34:14 executing program 1: openat$vcs(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 12:34:14 executing program 6: io_uring_setup(0x3995, &(0x7f0000000540)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) 12:34:14 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) 12:34:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) 12:34:14 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:14 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) 12:34:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:14 executing program 4: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) [ 279.776980] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 279.778440] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 279.779671] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 279.781394] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 279.783852] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 279.785048] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 279.787396] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 279.789161] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 281.031617] Bluetooth: hci0: command 0x0c1a tx timeout [ 281.798622] Bluetooth: hci7: command 0x0c1a tx timeout [ 281.799566] Bluetooth: hci6: command 0x0c1a tx timeout [ 281.799718] Bluetooth: hci5: command 0x0c1a tx timeout [ 281.800165] Bluetooth: hci4: command 0x0c1a tx timeout [ 281.801128] Bluetooth: hci3: command 0x0c1a tx timeout [ 281.801579] Bluetooth: hci2: command 0x0c1a tx timeout [ 281.802504] Bluetooth: hci1: command 0x0c1a tx timeout 12:34:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:23 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) 12:34:23 executing program 5: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) 12:34:23 executing program 7: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:34:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) 12:34:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:23 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:23 executing program 4: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:34:23 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) 12:34:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) 12:34:23 executing program 4: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:34:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) 12:34:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 12:34:23 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) 12:34:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:23 executing program 4: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) [ 288.827753] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.828404] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.829072] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.829633] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.830192] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 288.830781] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 288.831317] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 288.831894] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 290.057972] Bluetooth: hci0: command 0x0c1a tx timeout [ 290.886630] Bluetooth: hci7: command 0x0c1a tx timeout [ 290.887708] Bluetooth: hci6: command 0x0c1a tx timeout [ 290.888703] Bluetooth: hci5: command 0x0c1a tx timeout [ 290.889535] Bluetooth: hci4: command 0x0c1a tx timeout [ 290.889689] Bluetooth: hci3: command 0x0c1a tx timeout [ 290.890061] Bluetooth: hci2: command 0x0c1a tx timeout [ 290.891014] Bluetooth: hci1: command 0x0c1a tx timeout 12:34:31 executing program 5: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) 12:34:31 executing program 7: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:34:31 executing program 4: getegid() getegid() syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:34:31 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) 12:34:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) 12:34:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) 12:34:31 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:31 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) 12:34:31 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 12:34:31 executing program 4: getegid() getegid() syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:34:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) 12:34:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 12:34:31 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:31 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) 12:34:31 executing program 4: getegid() syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) [ 296.630142] [ 296.630472] ===================================== [ 296.631187] WARNING: bad unlock balance detected! [ 296.631917] 6.19.0-rc5-next-20260116 #1 Not tainted [ 296.632678] ------------------------------------- [ 296.633467] syz-executor.4/5294 is trying to release lock (rcu_read_lock) at: [ 296.634550] [] __wait_on_freeing_inode+0x105/0x350 [ 296.635504] but there are no more locks to release! [ 296.636240] [ 296.636240] other info that might help us debug this: [ 296.637837] 4 locks held by syz-executor.4/5294: [ 296.639037] #0: ffff88800f6163f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 296.642993] #1: ffff88801b5aecb8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 296.645486] #2: ffff88800fa82950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 296.647159] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 296.648319] [ 296.648319] stack backtrace: [ 296.648880] CPU: 1 UID: 0 PID: 5294 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 296.648903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 296.648914] Call Trace: [ 296.648924] [ 296.648932] dump_stack_lvl+0xca/0x120 [ 296.648973] ? __wait_on_freeing_inode+0x105/0x350 [ 296.648998] print_unlock_imbalance_bug+0x118/0x130 [ 296.649023] ? __wait_on_freeing_inode+0x105/0x350 [ 296.649046] lock_release+0x1ee/0x270 [ 296.649069] __wait_on_freeing_inode+0x10a/0x350 [ 296.649092] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 296.649116] ? __pfx_var_wake_function+0x10/0x10 [ 296.649143] ? lock_is_held_type+0x9e/0x120 [ 296.649160] insert_inode_locked+0x25f/0x890 [ 296.649187] __ext4_new_inode+0x223d/0x4cd0 [ 296.649214] ? __pfx___ext4_new_inode+0x10/0x10 [ 296.649236] ? __pfx___dquot_initialize+0x10/0x10 [ 296.649263] ? __pfx_avc_has_perm+0x10/0x10 [ 296.649287] ext4_symlink+0x623/0xb40 [ 296.649316] ? __pfx_ext4_symlink+0x10/0x10 [ 296.649341] ? security_inode_permission+0x72/0xe0 [ 296.649361] vfs_symlink+0x44b/0x840 [ 296.649386] filename_symlinkat+0x158/0x440 [ 296.649408] ? __pfx_filename_symlinkat+0x10/0x10 [ 296.649430] ? strncpy_from_user+0x21b/0x2f0 [ 296.649455] __x64_sys_symlink+0x82/0x110 [ 296.649476] do_syscall_64+0xbf/0x420 [ 296.649497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.649517] RIP: 0033:0x7f939e8de427 [ 296.649533] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 296.649550] RSP: 002b:00007ffe7d56e948 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 296.649567] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f939e8de427 [ 296.649578] RDX: ffffffffffffffbc RSI: 00007f939e93900e RDI: 00007f939e9381dd [ 296.649590] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe7d56e3c0 [ 296.649601] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 296.649611] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe7d56ea10 [ 296.649627] [ 296.674086] ------------[ cut here ]------------ [ 296.674764] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.4/5294 [ 296.676226] Modules linked in: [ 296.676721] CPU: 1 UID: 0 PID: 5294 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 296.678063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 296.679174] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 296.680013] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 296.682373] RSP: 0018:ffff88803df3f9a0 EFLAGS: 00010286 [ 296.683121] RAX: 00000000ffffffff RBX: ffff888041ccd280 RCX: ffffffff815660f7 [ 296.684110] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff888041ccd67c [ 296.685087] RBP: ffff888041ccd280 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 296.686055] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888041ccd280 [ 296.687024] R13: 0000000000000001 R14: ffffffff85c0fef0 R15: ffff888009657578 [ 296.688014] FS: 0000555575f86400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 296.689113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.689927] CR2: 00007f7fcdad01f0 CR3: 000000001eb43000 CR4: 0000000000350ef0 [ 296.690907] Call Trace: [ 296.691290] [ 296.692479] __wait_on_freeing_inode+0x10f/0x350 [ 296.693703] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 296.695450] ? __pfx_var_wake_function+0x10/0x10 [ 296.697508] ? lock_is_held_type+0x9e/0x120 [ 296.699346] insert_inode_locked+0x25f/0x890 [ 296.702076] __ext4_new_inode+0x223d/0x4cd0 [ 296.706307] ? __pfx___ext4_new_inode+0x10/0x10 [ 296.708390] ? __pfx___dquot_initialize+0x10/0x10 [ 296.709731] ? __pfx_avc_has_perm+0x10/0x10 [ 296.718500] ext4_symlink+0x623/0xb40 [ 296.722325] ? __pfx_ext4_symlink+0x10/0x10 [ 296.724054] ? security_inode_permission+0x72/0xe0 [ 296.726815] vfs_symlink+0x44b/0x840 [ 296.728977] filename_symlinkat+0x158/0x440 [ 296.730889] ? __pfx_filename_symlinkat+0x10/0x10 [ 296.732158] ? strncpy_from_user+0x21b/0x2f0 [ 296.735313] __x64_sys_symlink+0x82/0x110 [ 296.736627] do_syscall_64+0xbf/0x420 [ 296.737975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.738893] RIP: 0033:0x7f939e8de427 [ 296.739489] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 296.741994] RSP: 002b:00007ffe7d56e948 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 296.743055] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f939e8de427 [ 296.744062] RDX: ffffffffffffffbc RSI: 00007f939e93900e RDI: 00007f939e9381dd [ 296.745070] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe7d56e3c0 [ 296.746070] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 296.747068] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe7d56ea10 [ 296.751503] [ 296.751900] irq event stamp: 1209 [ 296.752348] hardirqs last enabled at (1209): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 296.753749] hardirqs last disabled at (1208): [] _raw_spin_lock_irqsave+0x53/0x60 [ 296.755098] softirqs last enabled at (1204): [] kernel_fpu_end+0x59/0x70 [ 296.756368] softirqs last disabled at (1202): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 296.757791] ---[ end trace 0000000000000000 ]--- [ 296.849877] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 296.850833] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.851955] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.852891] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.853753] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 296.856667] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 296.857498] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 296.858484] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 298.119542] Bluetooth: hci0: command 0x0c1a tx timeout [ 298.887548] Bluetooth: hci7: command 0x0c1a tx timeout [ 298.887592] Bluetooth: hci6: command 0x0c1a tx timeout [ 298.888127] Bluetooth: hci5: command 0x0c1a tx timeout [ 298.888633] Bluetooth: hci4: command 0x0c1a tx timeout [ 298.889118] Bluetooth: hci3: command 0x0c1a tx timeout [ 298.889733] Bluetooth: hci2: command 0x0c1a tx timeout [ 298.890092] Bluetooth: hci1: command 0x0c1a tx timeout 12:34:39 executing program 1: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) 12:34:39 executing program 7: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x480240) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x80) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000200)=""/48) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000240)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:34:39 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) 12:34:39 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:34:39 executing program 5: getegid() getegid() r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40850) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) 12:34:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) 12:34:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) 12:34:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) eventfd(0x6) 12:34:39 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) 12:34:39 executing program 4: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x20000, 0x0) 12:34:39 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) eventfd(0x6) 12:34:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r3) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000006c0)={'wpan4\x00'}) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) 12:34:39 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x89ffcbf2f24b7ad5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) syz_io_uring_setup(0x4d1a, &(0x7f0000000540)={0x0, 0x9c87, 0x18, 0x2, 0x3dc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) eventfd(0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000680), r2) syz_io_uring_setup(0x3fb8, &(0x7f0000000700)={0x0, 0xb8f7, 0x8, 0x0, 0x182}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) [ 304.948202] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 304.949462] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 304.951191] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 304.953425] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 304.955056] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 304.956486] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 304.957933] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 304.959202] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 306.183575] Bluetooth: hci0: command 0x0c1a tx timeout VM DIAGNOSIS: 12:34:31 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff8880198afb10 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11003315f63 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff8880198afb48 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555659b400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f789ee95260 CR3=000000001ea9a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff000000000000000000000000000000 XMM01=01000000000000000000000000000000 XMM02=7463656a6e695f31313230385f7a7973 XMM03=ffffffff81c2e0a8ffffffff81c2df5e XMM04=ffffffff81c2e369ffffffff81c2e17a XMM05=ffffffff81c2e0faffffffff81c2e0c5 XMM06=ffffffff81c2e0a8ffffffff81c2df5e XMM07=ffffffff81c2df33ffffffff81c2deed XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000023 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88803df3f488 R8 =0000000000000000 R9 =ffffed1001766046 R10=0000000000000023 R11=666666203a322320 R12=0000000000000023 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555575f86400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7fcdad01f0 CR3=000000001eb43000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000