syzkaller login: [   40.124554] systemd-rfkill (176) used greatest stack depth: 24704 bytes left
Warning: Permanently added '[localhost]:52075' (ECDSA) to the list of known hosts.
2026/01/19 18:49:08 fuzzer started
2026/01/19 18:49:09 dialing manager at localhost:42157
[   44.522245] cgroup: Unknown subsys name 'net'
[   44.555103] cgroup: Unknown subsys name 'cpuset'
[   44.562484] cgroup: Unknown subsys name 'rlimit'
2026/01/19 18:49:19 syscalls: 211
2026/01/19 18:49:19 code coverage: enabled
2026/01/19 18:49:19 comparison tracing: enabled
2026/01/19 18:49:19 extra coverage: enabled
2026/01/19 18:49:19 setuid sandbox: enabled
2026/01/19 18:49:19 namespace sandbox: enabled
2026/01/19 18:49:19 Android sandbox: enabled
2026/01/19 18:49:19 fault injection: enabled
2026/01/19 18:49:19 leak checking: enabled
2026/01/19 18:49:19 net packet injection: enabled
2026/01/19 18:49:19 net device setup: enabled
2026/01/19 18:49:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/19 18:49:19 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/19 18:49:19 USB emulation: enabled
2026/01/19 18:49:19 hci packet injection: enabled
2026/01/19 18:49:19 wifi device emulation: enabled
2026/01/19 18:49:19 802.15.4 emulation: enabled
2026/01/19 18:49:19 fetching corpus: 0, signal 0/0 (executing program)
2026/01/19 18:49:20 starting 8 fuzzer processes
18:49:20 executing program 0:
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffff9)
r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "093e9c50778945f71fefb0ca520854807eae29f6646ad71d7fbf34e6ac1a3102ba0569cbccb04cc4329404314d072ed2a9afa8130d281fdfab9a956b9cbd2f82", 0x18}, 0x48, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$unlink(0x9, r1, r0)
add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffe)
keyctl$reject(0x13, r0, 0x100000000, 0x5, r1)
r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$negate(0xd, r1, 0x1, r2)
r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000480)='trusted\x00', &(0x7f00000004c0)='\'%\x00')
wait4(0xffffffffffffffff, &(0x7f0000000500), 0x2, &(0x7f0000000540))
r4 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x36, 0x36, 0x66, 0x32, 0x64, 0x0, 0x65, 0x0, 0x35, 0x61, 0x33, 0x62, 0x32, 0x62, 0x66, 0x31]}, &(0x7f0000000680)={0x0, "11d8542edbe8daee9bd791fc3a6e945607d6bafb287d01f97c706d4952314d8b67381c7c5174ca2300f1f536bc2ce9b1f6abc07f08efd915c6fddb878c4f6238", 0x1d}, 0x48, r0)
keyctl$link(0x8, r4, r3)
r5 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1)
r6 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r1)
keyctl$search(0xa, r5, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x1}, r6)
r7 = add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @desc4}, &(0x7f0000000900)={0x0, "1e93a933cc06cac3d0b7017ead50356794bad9e050d6f6211c9f668eef10bc1d6ab4ce4391dbe9be271154e0285b5668bfe7588ad0632d710f5ac3d8978395ac", 0x3e}, 0x48, r5)
keyctl$negate(0xd, 0x0, 0x3, r2)
add_key$fscrypt_provisioning(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x0}, &(0x7f0000000a00)={0x9f83cbc828044e11, 0x0, @a}, 0x48, r7)
keyctl$reject(0x13, r5, 0x2, 0x10000, r4)

18:49:20 executing program 1:
r0 = gettid()
wait4(r0, &(0x7f0000000000), 0x20000000, &(0x7f0000000040))
capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x4, 0xdbcc, 0x4, 0x0, 0x9, 0x200})
r1 = gettid()
waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000180))
getrusage(0x0, &(0x7f0000000240))
r2 = gettid()
sched_setaffinity(r2, 0x8, &(0x7f0000000300))
getpgrp(r0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000000640)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/200, 0xc8}], 0x3, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f0000000800)=""/71, 0x47}, {&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/30, 0x1e}, {&(0x7f00000009c0)=""/77, 0x4d}], 0x6, 0x0)
wait4(r2, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00))
r4 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
shmdt(r4)
ptrace$setopts(0x4200, r0, 0x43e800000000, 0x34)
ptrace$setopts(0x4206, r1, 0xffffffffffffffbe, 0x49)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, 0x3e9, 0x10, 0x70bd2d, 0x25dfdbfe, {0x10, 0x1, 0x2, r0, 0x5, 0x99, 0x2, 0x4, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x38}}, 0x40000d0)
modify_ldt$write2(0x11, &(0x7f0000000cc0)={0x9, 0x1000, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10)
sched_rr_get_interval(0x0, &(0x7f0000000d00))
ptrace$setopts(0x4200, 0x0, 0x8, 0x100024)

18:49:20 executing program 2:
r0 = socket(0xa, 0x3, 0x5)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x7, {}, 0x4f, 0x4, 0x1, {0x0, 0x0, r0}}, 0xffff3aeb)
syz_io_uring_setup(0x716c, &(0x7f0000000040)={0x0, 0x86dc, 0x0, 0x1, 0x19a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
syz_io_uring_setup(0x7f, &(0x7f0000000140)={0x0, 0xf00a, 0x2, 0x3, 0x354}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x400, 0x23456}, 0x5)
pselect6(0x40, &(0x7f00000002c0)={0x9, 0x5, 0x52a, 0x3, 0xfff, 0x0, 0x7, 0x68d}, &(0x7f0000000300)={0x3, 0x5, 0x5, 0x101, 0xe9b, 0x3, 0xffff, 0x80}, &(0x7f0000000340)={0x20, 0x7, 0x800, 0x1, 0xf3f7, 0xfff, 0x8, 0x4}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0), 0x8})
ptrace$setopts(0x4206, 0xffffffffffffffff, 0x1, 0x42)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4)
prlimit64(0xffffffffffffffff, 0x3, &(0x7f00000004c0)={0x0, 0x4}, &(0x7f0000000500))
getpid()
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x280, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x5010}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4008850)
r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x9, 0x101800)
ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f00000006c0)={0x47, 0x1, 0x2, 0x40})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', <r5=>0x0, 0x7, 0x7800, 0x80000000, 0x3, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x66, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@noop]}}}}})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4)
sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r6, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ptrace$getsig(0x4202, 0x0, 0x3, &(0x7f0000000900))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000980)={'syztnl2\x00', <r7=>r5, 0x700, 0x80, 0x7, 0x9, {{0xc, 0x4, 0x0, 0x3b, 0x30, 0x64, 0x0, 0x3f, 0x0, 0x0, @rand_addr=0x64010101, @empty, {[@ssrr={0x89, 0x1b, 0x44, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @empty, @rand_addr=0x64010102, @loopback]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000ac0)={'gretap0\x00', &(0x7f0000000a40)={'syztnl2\x00', r7, 0xc7, 0x8, 0x1, 0x7f, {{0xb, 0x4, 0x1, 0x4, 0x2c, 0x68, 0x0, 0x81, 0x4, 0x0, @empty, @multicast1, {[@rr={0x7, 0x17, 0xab, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @multicast1]}]}}}}})

18:49:20 executing program 3:
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)={0x2f, "2e6adc11724e8c894f599b533284843801a0f38ce71188d5d60f3d44e486709059c98dff34274d375f0d0726b61a36"})
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000040)={0x35, "60cff0d7807be30600a7215bdada937b7a404e613323661be117da010365c218c66a0ae6f2af4fcccd40f5243f0b4bde080d3c67ba"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {}, 0x1}, 0x7f)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x1)
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f00000000c0))
r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x55e, 0x220000)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000140)=0x2)
r1 = io_uring_setup(0x5b2b, &(0x7f0000000180)={0x0, 0xf841, 0x8, 0x1, 0x1c2})
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = getuid()
setresuid(0xffffffffffffffff, 0x0, r2)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000200)={0x3, 0x2, 0xab9, 0x6, 0x3, 0x3ff})
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000240))
r3 = syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x4c0140)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000002c0)=0x3)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x4)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0)
setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000400), 0x4)

18:49:20 executing program 4:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8804, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r1=>0x0, 0x4, 0x40, 0x20, 0x3, 0x18, @loopback, @local, 0x7, 0x40, 0x1f, 0x2}})
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000880)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010)
ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000004c0)={0x1, 0xffffffff, 0x7b})
socketpair(0x2c, 0x80006, 0x6, &(0x7f0000000500)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000640)=0xe8)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004895}, 0x8000)
read$hiddev(r0, &(0x7f0000000780)=""/133, 0x85)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90)
socketpair(0x1e, 0x3, 0x9, &(0x7f0000000940)={<r6=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'})
setresuid(0xffffffffffffffff, r5, r5)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000009c0), 0x20180, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@initdev, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000b00)=0xe8)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x4004)

[   55.100813] audit: type=1400 audit(1768848560.825:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
18:49:20 executing program 5:
r0 = gettid()
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x300, 0x70bd2a, 0x25dfdbfb, {0x20, 0x0, 0x0, r0, 0xffffffff, 0x8, 0xc2, 0x3, 0x0, 0x9}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x21}, 0x400)
ptrace$getregs(0xe, r0, 0x1, &(0x7f0000000100)=""/250)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x93}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044010}, 0x20008040)
r1 = syz_io_uring_complete(0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20048041)
getpid()
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7bc}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
r3 = memfd_secret(0x80000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r2)
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r3)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000057}, 0x20048000)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000840), 0x2000, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0xe00, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4814}, 0x50)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99a}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x62cc}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0x0)
prctl$PR_GET_SECCOMP(0x15)
r7 = syz_open_dev$hiddev(&(0x7f0000000ac0), 0x2, 0x2000)
ioctl$HIDIOCAPPLICATION(r7, 0x4802, 0x4)

18:49:20 executing program 7:
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xb4, 0x4000)
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000040))
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000080))
ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f00000000c0)={0x3, 0xffffffff, 0x77f, 0xd, 0x7f, 0x2f5c40})
r1 = syz_io_uring_complete(0x0)
ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000100))
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000140)=0x1, 0x4)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x1, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44008801}, 0x20040050)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x54}}, 0x20000000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xce0}]}, 0x24}}, 0x800)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder1\x00')
ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000500)={0x2, 0xffffffff, 0x1})
r3 = memfd_secret(0x80000)
setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000540)=0x1, 0x4)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000801)
ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000680))

18:49:20 executing program 6:
getrusage(0xffffffffffffffff, &(0x7f0000000000))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'erspan0\x00', <r0=>0x0, 0x1, 0x700, 0x7, 0x100, {{0x9, 0x4, 0x3, 0x30, 0x24, 0x64, 0x0, 0x8, 0x4, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0xf, 0x4a, [@multicast2, @multicast1, @loopback]}]}}}}})
getrusage(0x1, &(0x7f0000000180))
r1 = memfd_secret(0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'syztnl0\x00', r0, 0x8000, 0x10, 0x4, 0x4, {{0x1a, 0x4, 0x1, 0x2e, 0x68, 0x64, 0x0, 0x7, 0x2f, 0x0, @local, @empty, {[@rr={0x7, 0xb, 0xf5, [@multicast1, @dev={0xac, 0x14, 0x14, 0x34}]}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x8, [{@private=0xa010101, 0x7}, {@private=0xa010102, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5ec}]}, @timestamp_prespec={0x44, 0x24, 0x2c, 0x3, 0xb, [{@empty, 0x5}, {@loopback, 0x8000000}, {@rand_addr=0x64010101, 0x8}, {@broadcast, 0xff}]}, @rr={0x7, 0x7, 0x48, [@multicast2]}]}}}}})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000380))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$802154_dgram(r2, &(0x7f0000001440)={&(0x7f00000003c0)={0x24, @long={0x3, 0xffff}}, 0x14, &(0x7f0000001400)={&(0x7f0000000400)="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", 0x1000}, 0x1, 0x0, 0x0, 0x8800}, 0x26040880)
stat(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getgid()
r6 = getgid()
setgroups(0x5, &(0x7f00000015c0)=[r4, r5, r6, 0xee00, 0x0])
r7 = syz_open_dev$hiddev(&(0x7f0000001600), 0x8c3e, 0x204000)
ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000001640)={0x3, 0x100, 0x3688})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001680)={'batadv0\x00', <r8=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000017c0)={'gretap0\x00', &(0x7f00000016c0)={'tunl0\x00', r8, 0x10, 0x20, 0x3, 0x101, {{0x2d, 0x4, 0x1, 0x1d, 0xb4, 0x68, 0x0, 0xff, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0x3a, 0x1, 0x9, [{@multicast2, 0x8}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x6}]}, @rr={0x7, 0xf, 0x58, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0xc6, 0x3, 0x6, [{@multicast1, 0x6}, {@multicast1, 0x34}]}, @timestamp_prespec={0x44, 0x34, 0x82, 0x3, 0x5, [{@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010101, 0x8001}, {@private=0xa010102, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x1a}}, {@multicast2, 0x4}]}, @rr={0x7, 0x1b, 0x12, [@multicast2, @empty, @multicast2, @private=0xa010100, @multicast2, @empty]}, @lsrr={0x83, 0xf, 0x8f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010101]}]}}}}})
clock_gettime(0x5, &(0x7f0000001800))
ioctl$HIDIOCGFLAG(r7, 0x8004480e, &(0x7f0000001840))
sched_rr_get_interval(0x0, &(0x7f0000001880))

[   56.243924] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.247702] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.251373] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.258645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.263419] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.308045] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.310925] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.317974] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.323585] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.331359] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.388500] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.390646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.400235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.416109] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.424053] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.513701] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   56.518424] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   56.520218] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   56.521688] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   56.527350] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   56.529184] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   56.530653] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   56.536666] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   56.539679] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   56.541498] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   56.542902] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   56.549060] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   56.552239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   56.555008] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   56.557970] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   56.562573] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   56.564130] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   56.569209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   56.573402] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   56.575707] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   56.602758] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   56.605007] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   56.606646] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   56.632104] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   56.646164] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   58.277299] Bluetooth: hci0: command tx timeout
[   58.405625] Bluetooth: hci1: command tx timeout
[   58.469011] Bluetooth: hci2: command tx timeout
[   58.596922] Bluetooth: hci6: command tx timeout
[   58.661090] Bluetooth: hci4: command tx timeout
[   58.661425] Bluetooth: hci5: command tx timeout
[   58.661698] Bluetooth: hci3: command tx timeout
[   58.725197] Bluetooth: hci7: command tx timeout
[   60.326914] Bluetooth: hci0: command tx timeout
[   60.453862] Bluetooth: hci1: command tx timeout
[   60.517087] Bluetooth: hci2: command tx timeout
[   60.644952] Bluetooth: hci6: command tx timeout
[   60.709492] Bluetooth: hci3: command tx timeout
[   60.709929] Bluetooth: hci5: command tx timeout
[   60.710049] Bluetooth: hci4: command tx timeout
[   60.774094] Bluetooth: hci7: command tx timeout
[   62.373872] Bluetooth: hci0: command tx timeout
[   62.501895] Bluetooth: hci1: command tx timeout
[   62.564945] Bluetooth: hci2: command tx timeout
[   62.693863] Bluetooth: hci6: command tx timeout
[   62.757867] Bluetooth: hci3: command tx timeout
[   62.758035] Bluetooth: hci5: command tx timeout
[   62.758271] Bluetooth: hci4: command tx timeout
[   62.821944] Bluetooth: hci7: command tx timeout
[   64.420884] Bluetooth: hci0: command tx timeout
[   64.548971] Bluetooth: hci1: command tx timeout
[   64.613887] Bluetooth: hci2: command tx timeout
[   64.742445] Bluetooth: hci6: command tx timeout
[   64.805016] Bluetooth: hci4: command tx timeout
[   64.805431] Bluetooth: hci5: command tx timeout
[   64.805805] Bluetooth: hci3: command tx timeout
[   64.869914] Bluetooth: hci7: command tx timeout
[   88.753966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.754641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.683968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.684600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.076977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.077613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.211254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.212016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
18:49:58 executing program 3:
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)={0x2f, "2e6adc11724e8c894f599b533284843801a0f38ce71188d5d60f3d44e486709059c98dff34274d375f0d0726b61a36"})
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000040)={0x35, "60cff0d7807be30600a7215bdada937b7a404e613323661be117da010365c218c66a0ae6f2af4fcccd40f5243f0b4bde080d3c67ba"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {}, 0x1}, 0x7f)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x1)
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f00000000c0))
r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x55e, 0x220000)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000140)=0x2)
r1 = io_uring_setup(0x5b2b, &(0x7f0000000180)={0x0, 0xf841, 0x8, 0x1, 0x1c2})
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = getuid()
setresuid(0xffffffffffffffff, 0x0, r2)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000200)={0x3, 0x2, 0xab9, 0x6, 0x3, 0x3ff})
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000240))
r3 = syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x4c0140)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000002c0)=0x3)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x4)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0)
setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000400), 0x4)

18:49:58 executing program 3:
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)={0x2f, "2e6adc11724e8c894f599b533284843801a0f38ce71188d5d60f3d44e486709059c98dff34274d375f0d0726b61a36"})
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000040)={0x35, "60cff0d7807be30600a7215bdada937b7a404e613323661be117da010365c218c66a0ae6f2af4fcccd40f5243f0b4bde080d3c67ba"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {}, 0x1}, 0x7f)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x1)
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f00000000c0))
r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x55e, 0x220000)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000140)=0x2)
r1 = io_uring_setup(0x5b2b, &(0x7f0000000180)={0x0, 0xf841, 0x8, 0x1, 0x1c2})
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = getuid()
setresuid(0xffffffffffffffff, 0x0, r2)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000200)={0x3, 0x2, 0xab9, 0x6, 0x3, 0x3ff})
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000240))
r3 = syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x4c0140)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000002c0)=0x3)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x4)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0)
setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000400), 0x4)

[   92.718245] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure
18:49:58 executing program 1:
r0 = gettid()
wait4(r0, &(0x7f0000000000), 0x20000000, &(0x7f0000000040))
capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x4, 0xdbcc, 0x4, 0x0, 0x9, 0x200})
r1 = gettid()
waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000180))
getrusage(0x0, &(0x7f0000000240))
r2 = gettid()
sched_setaffinity(r2, 0x8, &(0x7f0000000300))
getpgrp(r0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000000640)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/200, 0xc8}], 0x3, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f0000000800)=""/71, 0x47}, {&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/30, 0x1e}, {&(0x7f00000009c0)=""/77, 0x4d}], 0x6, 0x0)
wait4(r2, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00))
r4 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
shmdt(r4)
ptrace$setopts(0x4200, r0, 0x43e800000000, 0x34)
ptrace$setopts(0x4206, r1, 0xffffffffffffffbe, 0x49)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, 0x3e9, 0x10, 0x70bd2d, 0x25dfdbfe, {0x10, 0x1, 0x2, r0, 0x5, 0x99, 0x2, 0x4, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x38}}, 0x40000d0)
modify_ldt$write2(0x11, &(0x7f0000000cc0)={0x9, 0x1000, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10)
sched_rr_get_interval(0x0, &(0x7f0000000d00))
ptrace$setopts(0x4200, 0x0, 0x8, 0x100024)

18:49:58 executing program 3:
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)={0x2f, "2e6adc11724e8c894f599b533284843801a0f38ce71188d5d60f3d44e486709059c98dff34274d375f0d0726b61a36"})
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000040)={0x35, "60cff0d7807be30600a7215bdada937b7a404e613323661be117da010365c218c66a0ae6f2af4fcccd40f5243f0b4bde080d3c67ba"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {}, 0x1}, 0x7f)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x1)
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f00000000c0))
r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x55e, 0x220000)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000140)=0x2)
r1 = io_uring_setup(0x5b2b, &(0x7f0000000180)={0x0, 0xf841, 0x8, 0x1, 0x1c2})
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = getuid()
setresuid(0xffffffffffffffff, 0x0, r2)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000200)={0x3, 0x2, 0xab9, 0x6, 0x3, 0x3ff})
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000240))
r3 = syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x4c0140)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000002c0)=0x3)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x4)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0)
setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000400), 0x4)

18:49:58 executing program 1:
r0 = gettid()
wait4(r0, &(0x7f0000000000), 0x20000000, &(0x7f0000000040))
capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x4, 0xdbcc, 0x4, 0x0, 0x9, 0x200})
r1 = gettid()
waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000180))
getrusage(0x0, &(0x7f0000000240))
r2 = gettid()
sched_setaffinity(r2, 0x8, &(0x7f0000000300))
getpgrp(r0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000000640)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/200, 0xc8}], 0x3, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f0000000800)=""/71, 0x47}, {&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/30, 0x1e}, {&(0x7f00000009c0)=""/77, 0x4d}], 0x6, 0x0)
wait4(r2, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00))
r4 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
shmdt(r4)
ptrace$setopts(0x4200, r0, 0x43e800000000, 0x34)
ptrace$setopts(0x4206, r1, 0xffffffffffffffbe, 0x49)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, 0x3e9, 0x10, 0x70bd2d, 0x25dfdbfe, {0x10, 0x1, 0x2, r0, 0x5, 0x99, 0x2, 0x4, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x38}}, 0x40000d0)
modify_ldt$write2(0x11, &(0x7f0000000cc0)={0x9, 0x1000, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10)
sched_rr_get_interval(0x0, &(0x7f0000000d00))
ptrace$setopts(0x4200, 0x0, 0x8, 0x100024)

[   92.967881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.968503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
18:49:58 executing program 3:
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)={0x2f, "2e6adc11724e8c894f599b533284843801a0f38ce71188d5d60f3d44e486709059c98dff34274d375f0d0726b61a36"})
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000040)={0x35, "60cff0d7807be30600a7215bdada937b7a404e613323661be117da010365c218c66a0ae6f2af4fcccd40f5243f0b4bde080d3c67ba"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {}, 0x1}, 0x7f)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x1)
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f00000000c0))
r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x55e, 0x220000)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000140)=0x2)
r1 = io_uring_setup(0x5b2b, &(0x7f0000000180)={0x0, 0xf841, 0x8, 0x1, 0x1c2})
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = getuid()
setresuid(0xffffffffffffffff, 0x0, r2)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000200)={0x3, 0x2, 0xab9, 0x6, 0x3, 0x3ff})
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000240))
r3 = syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x4c0140)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000002c0)=0x3)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x4)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400), 0x4)

18:49:58 executing program 3:
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)={0x2f, "2e6adc11724e8c894f599b533284843801a0f38ce71188d5d60f3d44e486709059c98dff34274d375f0d0726b61a36"})
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000040)={0x35, "60cff0d7807be30600a7215bdada937b7a404e613323661be117da010365c218c66a0ae6f2af4fcccd40f5243f0b4bde080d3c67ba"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {}, 0x1}, 0x7f)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x1)
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f00000000c0))
r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x55e, 0x220000)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000140)=0x2)
r1 = io_uring_setup(0x5b2b, &(0x7f0000000180)={0x0, 0xf841, 0x8, 0x1, 0x1c2})
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = getuid()
setresuid(0xffffffffffffffff, 0x0, r2)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000200)={0x3, 0x2, 0xab9, 0x6, 0x3, 0x3ff})
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000240))
r3 = syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x4c0140)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000002c0)=0x3)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x4)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400), 0x4)

18:49:58 executing program 1:
r0 = gettid()
wait4(r0, &(0x7f0000000000), 0x20000000, &(0x7f0000000040))
capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x4, 0xdbcc, 0x4, 0x0, 0x9, 0x200})
r1 = gettid()
waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000180))
getrusage(0x0, &(0x7f0000000240))
r2 = gettid()
sched_setaffinity(r2, 0x8, &(0x7f0000000300))
getpgrp(r0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000000640)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/200, 0xc8}], 0x3, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f0000000800)=""/71, 0x47}, {&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/30, 0x1e}, {&(0x7f00000009c0)=""/77, 0x4d}], 0x6, 0x0)
wait4(r2, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00))
r4 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
shmdt(r4)
ptrace$setopts(0x4200, r0, 0x43e800000000, 0x34)
ptrace$setopts(0x4206, r1, 0xffffffffffffffbe, 0x49)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, 0x3e9, 0x10, 0x70bd2d, 0x25dfdbfe, {0x10, 0x1, 0x2, r0, 0x5, 0x99, 0x2, 0x4, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x38}}, 0x40000d0)
modify_ldt$write2(0x11, &(0x7f0000000cc0)={0x9, 0x1000, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10)
sched_rr_get_interval(0x0, &(0x7f0000000d00))
ptrace$setopts(0x4200, 0x0, 0x8, 0x100024)

[   93.288280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.288963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.454491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.457045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.569168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.569822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.624494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.625166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.684408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.685050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.729685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.730360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.839315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.840424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.011971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.012621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.125674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.130009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.401513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.402270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.425740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.426374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.450320] systemd-rfkill (3719) used greatest stack depth: 24432 bytes left
18:50:12 executing program 6:
getrusage(0xffffffffffffffff, &(0x7f0000000000))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'erspan0\x00', <r0=>0x0, 0x1, 0x700, 0x7, 0x100, {{0x9, 0x4, 0x3, 0x30, 0x24, 0x64, 0x0, 0x8, 0x4, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0xf, 0x4a, [@multicast2, @multicast1, @loopback]}]}}}}})
getrusage(0x1, &(0x7f0000000180))
r1 = memfd_secret(0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'syztnl0\x00', r0, 0x8000, 0x10, 0x4, 0x4, {{0x1a, 0x4, 0x1, 0x2e, 0x68, 0x64, 0x0, 0x7, 0x2f, 0x0, @local, @empty, {[@rr={0x7, 0xb, 0xf5, [@multicast1, @dev={0xac, 0x14, 0x14, 0x34}]}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x8, [{@private=0xa010101, 0x7}, {@private=0xa010102, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5ec}]}, @timestamp_prespec={0x44, 0x24, 0x2c, 0x3, 0xb, [{@empty, 0x5}, {@loopback, 0x8000000}, {@rand_addr=0x64010101, 0x8}, {@broadcast, 0xff}]}, @rr={0x7, 0x7, 0x48, [@multicast2]}]}}}}})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000380))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$802154_dgram(r2, &(0x7f0000001440)={&(0x7f00000003c0)={0x24, @long={0x3, 0xffff}}, 0x14, &(0x7f0000001400)={&(0x7f0000000400)="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", 0x1000}, 0x1, 0x0, 0x0, 0x8800}, 0x26040880)
stat(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getgid()
r6 = getgid()
setgroups(0x5, &(0x7f00000015c0)=[r4, r5, r6, 0xee00, 0x0])
r7 = syz_open_dev$hiddev(&(0x7f0000001600), 0x8c3e, 0x204000)
ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000001640)={0x3, 0x100, 0x3688})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001680)={'batadv0\x00', <r8=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000017c0)={'gretap0\x00', &(0x7f00000016c0)={'tunl0\x00', r8, 0x10, 0x20, 0x3, 0x101, {{0x2d, 0x4, 0x1, 0x1d, 0xb4, 0x68, 0x0, 0xff, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0x3a, 0x1, 0x9, [{@multicast2, 0x8}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x6}]}, @rr={0x7, 0xf, 0x58, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0xc6, 0x3, 0x6, [{@multicast1, 0x6}, {@multicast1, 0x34}]}, @timestamp_prespec={0x44, 0x34, 0x82, 0x3, 0x5, [{@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010101, 0x8001}, {@private=0xa010102, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x1a}}, {@multicast2, 0x4}]}, @rr={0x7, 0x1b, 0x12, [@multicast2, @empty, @multicast2, @private=0xa010100, @multicast2, @empty]}, @lsrr={0x83, 0xf, 0x8f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010101]}]}}}}})
clock_gettime(0x5, &(0x7f0000001800))
ioctl$HIDIOCGFLAG(r7, 0x8004480e, &(0x7f0000001840))
sched_rr_get_interval(0x0, &(0x7f0000001880))

18:50:12 executing program 0:
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffff9)
r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "093e9c50778945f71fefb0ca520854807eae29f6646ad71d7fbf34e6ac1a3102ba0569cbccb04cc4329404314d072ed2a9afa8130d281fdfab9a956b9cbd2f82", 0x18}, 0x48, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$unlink(0x9, r1, r0)
add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffe)
keyctl$reject(0x13, r0, 0x100000000, 0x5, r1)
r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$negate(0xd, r1, 0x1, r2)
r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000480)='trusted\x00', &(0x7f00000004c0)='\'%\x00')
wait4(0xffffffffffffffff, &(0x7f0000000500), 0x2, &(0x7f0000000540))
r4 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x36, 0x36, 0x66, 0x32, 0x64, 0x0, 0x65, 0x0, 0x35, 0x61, 0x33, 0x62, 0x32, 0x62, 0x66, 0x31]}, &(0x7f0000000680)={0x0, "11d8542edbe8daee9bd791fc3a6e945607d6bafb287d01f97c706d4952314d8b67381c7c5174ca2300f1f536bc2ce9b1f6abc07f08efd915c6fddb878c4f6238", 0x1d}, 0x48, r0)
keyctl$link(0x8, r4, r3)
r5 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1)
r6 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r1)
keyctl$search(0xa, r5, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x1}, r6)
r7 = add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @desc4}, &(0x7f0000000900)={0x0, "1e93a933cc06cac3d0b7017ead50356794bad9e050d6f6211c9f668eef10bc1d6ab4ce4391dbe9be271154e0285b5668bfe7588ad0632d710f5ac3d8978395ac", 0x3e}, 0x48, r5)
keyctl$negate(0xd, 0x0, 0x3, r2)
add_key$fscrypt_provisioning(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x0}, &(0x7f0000000a00)={0x9f83cbc828044e11, 0x0, @a}, 0x48, r7)
keyctl$reject(0x13, r5, 0x2, 0x10000, r4)

18:50:12 executing program 7:
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xb4, 0x4000)
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000040))
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000080))
ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f00000000c0)={0x3, 0xffffffff, 0x77f, 0xd, 0x7f, 0x2f5c40})
r1 = syz_io_uring_complete(0x0)
ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000100))
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000140)=0x1, 0x4)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x1, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44008801}, 0x20040050)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x54}}, 0x20000000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xce0}]}, 0x24}}, 0x800)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder1\x00')
ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000500)={0x2, 0xffffffff, 0x1})
r3 = memfd_secret(0x80000)
setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000540)=0x1, 0x4)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000801)
ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000680))

18:50:12 executing program 2:
r0 = socket(0xa, 0x3, 0x5)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x7, {}, 0x4f, 0x4, 0x1, {0x0, 0x0, r0}}, 0xffff3aeb)
syz_io_uring_setup(0x716c, &(0x7f0000000040)={0x0, 0x86dc, 0x0, 0x1, 0x19a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
syz_io_uring_setup(0x7f, &(0x7f0000000140)={0x0, 0xf00a, 0x2, 0x3, 0x354}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x400, 0x23456}, 0x5)
pselect6(0x40, &(0x7f00000002c0)={0x9, 0x5, 0x52a, 0x3, 0xfff, 0x0, 0x7, 0x68d}, &(0x7f0000000300)={0x3, 0x5, 0x5, 0x101, 0xe9b, 0x3, 0xffff, 0x80}, &(0x7f0000000340)={0x20, 0x7, 0x800, 0x1, 0xf3f7, 0xfff, 0x8, 0x4}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0), 0x8})
ptrace$setopts(0x4206, 0xffffffffffffffff, 0x1, 0x42)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4)
prlimit64(0xffffffffffffffff, 0x3, &(0x7f00000004c0)={0x0, 0x4}, &(0x7f0000000500))
getpid()
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x280, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x5010}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4008850)
r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x9, 0x101800)
ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f00000006c0)={0x47, 0x1, 0x2, 0x40})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', <r5=>0x0, 0x7, 0x7800, 0x80000000, 0x3, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x66, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@noop]}}}}})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4)
sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r6, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ptrace$getsig(0x4202, 0x0, 0x3, &(0x7f0000000900))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000980)={'syztnl2\x00', <r7=>r5, 0x700, 0x80, 0x7, 0x9, {{0xc, 0x4, 0x0, 0x3b, 0x30, 0x64, 0x0, 0x3f, 0x0, 0x0, @rand_addr=0x64010101, @empty, {[@ssrr={0x89, 0x1b, 0x44, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @empty, @rand_addr=0x64010102, @loopback]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000ac0)={'gretap0\x00', &(0x7f0000000a40)={'syztnl2\x00', r7, 0xc7, 0x8, 0x1, 0x7f, {{0xb, 0x4, 0x1, 0x4, 0x2c, 0x68, 0x0, 0x81, 0x4, 0x0, @empty, @multicast1, {[@rr={0x7, 0x17, 0xab, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @multicast1]}]}}}}})

18:50:12 executing program 5:
r0 = gettid()
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x300, 0x70bd2a, 0x25dfdbfb, {0x20, 0x0, 0x0, r0, 0xffffffff, 0x8, 0xc2, 0x3, 0x0, 0x9}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x21}, 0x400)
ptrace$getregs(0xe, r0, 0x1, &(0x7f0000000100)=""/250)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x93}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044010}, 0x20008040)
r1 = syz_io_uring_complete(0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20048041)
getpid()
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7bc}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
r3 = memfd_secret(0x80000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r2)
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r3)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000057}, 0x20048000)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000840), 0x2000, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0xe00, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4814}, 0x50)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99a}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x62cc}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0x0)
prctl$PR_GET_SECCOMP(0x15)
r7 = syz_open_dev$hiddev(&(0x7f0000000ac0), 0x2, 0x2000)
ioctl$HIDIOCAPPLICATION(r7, 0x4802, 0x4)

18:50:12 executing program 4:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8804, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r1=>0x0, 0x4, 0x40, 0x20, 0x3, 0x18, @loopback, @local, 0x7, 0x40, 0x1f, 0x2}})
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000880)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010)
ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000004c0)={0x1, 0xffffffff, 0x7b})
socketpair(0x2c, 0x80006, 0x6, &(0x7f0000000500)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000640)=0xe8)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004895}, 0x8000)
read$hiddev(r0, &(0x7f0000000780)=""/133, 0x85)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90)
socketpair(0x1e, 0x3, 0x9, &(0x7f0000000940)={<r6=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'})
setresuid(0xffffffffffffffff, r5, r5)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000009c0), 0x20180, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@initdev, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000b00)=0xe8)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x4004)

18:50:12 executing program 3:
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)={0x2f, "2e6adc11724e8c894f599b533284843801a0f38ce71188d5d60f3d44e486709059c98dff34274d375f0d0726b61a36"})
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000040)={0x35, "60cff0d7807be30600a7215bdada937b7a404e613323661be117da010365c218c66a0ae6f2af4fcccd40f5243f0b4bde080d3c67ba"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {}, 0x1}, 0x7f)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x1)
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f00000000c0))
r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x55e, 0x220000)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000140)=0x2)
r1 = io_uring_setup(0x5b2b, &(0x7f0000000180)={0x0, 0xf841, 0x8, 0x1, 0x1c2})
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = getuid()
setresuid(0xffffffffffffffff, 0x0, r2)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000200)={0x3, 0x2, 0xab9, 0x6, 0x3, 0x3ff})
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000240))
r3 = syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x4c0140)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000002c0)=0x3)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380), 0x4)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400), 0x4)

18:50:12 executing program 1:
r0 = gettid()
wait4(r0, &(0x7f0000000000), 0x20000000, &(0x7f0000000040))
capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x4, 0xdbcc, 0x4, 0x0, 0x9, 0x200})
r1 = gettid()
waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000180))
getrusage(0x0, &(0x7f0000000240))
r2 = gettid()
sched_setaffinity(r2, 0x8, &(0x7f0000000300))
getpgrp(r0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000000640)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/200, 0xc8}], 0x3, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f0000000800)=""/71, 0x47}, {&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/30, 0x1e}, {&(0x7f00000009c0)=""/77, 0x4d}], 0x6, 0x0)
wait4(r2, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00))
r4 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
shmdt(r4)
ptrace$setopts(0x4200, r0, 0x43e800000000, 0x34)
ptrace$setopts(0x4206, r1, 0xffffffffffffffbe, 0x49)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, 0x3e9, 0x10, 0x70bd2d, 0x25dfdbfe, {0x10, 0x1, 0x2, r0, 0x5, 0x99, 0x2, 0x4, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x38}}, 0x40000d0)
modify_ldt$write2(0x11, &(0x7f0000000cc0)={0x9, 0x1000, 0xffffffffffffffff, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10)
ptrace$setopts(0x4200, 0x0, 0x8, 0x100024)

18:50:12 executing program 1:
r0 = gettid()
wait4(r0, &(0x7f0000000000), 0x20000000, &(0x7f0000000040))
capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x4, 0xdbcc, 0x4, 0x0, 0x9, 0x200})
r1 = gettid()
waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000180))
getrusage(0x0, &(0x7f0000000240))
r2 = gettid()
sched_setaffinity(r2, 0x8, &(0x7f0000000300))
getpgrp(r0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000000640)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/200, 0xc8}], 0x3, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f0000000800)=""/71, 0x47}, {&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/30, 0x1e}, {&(0x7f00000009c0)=""/77, 0x4d}], 0x6, 0x0)
wait4(r2, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00))
r4 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
shmdt(r4)
ptrace$setopts(0x4200, r0, 0x43e800000000, 0x34)
ptrace$setopts(0x4206, r1, 0xffffffffffffffbe, 0x49)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, 0x3e9, 0x10, 0x70bd2d, 0x25dfdbfe, {0x10, 0x1, 0x2, r0, 0x5, 0x99, 0x2, 0x4, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x38}}, 0x40000d0)
ptrace$setopts(0x4200, 0x0, 0x8, 0x100024)

18:50:12 executing program 3:
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)={0x2f, "2e6adc11724e8c894f599b533284843801a0f38ce71188d5d60f3d44e486709059c98dff34274d375f0d0726b61a36"})
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000040)={0x35, "60cff0d7807be30600a7215bdada937b7a404e613323661be117da010365c218c66a0ae6f2af4fcccd40f5243f0b4bde080d3c67ba"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {}, 0x1}, 0x7f)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x1)
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f00000000c0))
r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x55e, 0x220000)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000140)=0x2)
r1 = io_uring_setup(0x5b2b, &(0x7f0000000180)={0x0, 0xf841, 0x8, 0x1, 0x1c2})
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = getuid()
setresuid(0xffffffffffffffff, 0x0, r2)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000200)={0x3, 0x2, 0xab9, 0x6, 0x3, 0x3ff})
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000240))
r3 = syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x4c0140)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000002c0)=0x3)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x4)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0)
setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000400), 0x4)

18:50:12 executing program 7:
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xb4, 0x4000)
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000040))
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000080))
ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f00000000c0)={0x3, 0xffffffff, 0x77f, 0xd, 0x7f, 0x2f5c40})
r1 = syz_io_uring_complete(0x0)
ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000100))
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000140)=0x1, 0x4)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x1, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44008801}, 0x20040050)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x54}}, 0x20000000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xce0}]}, 0x24}}, 0x800)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder1\x00')
ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000500)={0x2, 0xffffffff, 0x1})
r3 = memfd_secret(0x80000)
setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000540)=0x1, 0x4)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000801)
ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000680))

18:50:12 executing program 0:
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffff9)
r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "093e9c50778945f71fefb0ca520854807eae29f6646ad71d7fbf34e6ac1a3102ba0569cbccb04cc4329404314d072ed2a9afa8130d281fdfab9a956b9cbd2f82", 0x18}, 0x48, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$unlink(0x9, r1, r0)
add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffe)
keyctl$reject(0x13, r0, 0x100000000, 0x5, r1)
r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$negate(0xd, r1, 0x1, r2)
r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000480)='trusted\x00', &(0x7f00000004c0)='\'%\x00')
wait4(0xffffffffffffffff, &(0x7f0000000500), 0x2, &(0x7f0000000540))
r4 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x36, 0x36, 0x66, 0x32, 0x64, 0x0, 0x65, 0x0, 0x35, 0x61, 0x33, 0x62, 0x32, 0x62, 0x66, 0x31]}, &(0x7f0000000680)={0x0, "11d8542edbe8daee9bd791fc3a6e945607d6bafb287d01f97c706d4952314d8b67381c7c5174ca2300f1f536bc2ce9b1f6abc07f08efd915c6fddb878c4f6238", 0x1d}, 0x48, r0)
keyctl$link(0x8, r4, r3)
r5 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1)
r6 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r1)
keyctl$search(0xa, r5, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x1}, r6)
r7 = add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @desc4}, &(0x7f0000000900)={0x0, "1e93a933cc06cac3d0b7017ead50356794bad9e050d6f6211c9f668eef10bc1d6ab4ce4391dbe9be271154e0285b5668bfe7588ad0632d710f5ac3d8978395ac", 0x3e}, 0x48, r5)
keyctl$negate(0xd, 0x0, 0x3, r2)
add_key$fscrypt_provisioning(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x0}, &(0x7f0000000a00)={0x9f83cbc828044e11, 0x0, @a}, 0x48, r7)
keyctl$reject(0x13, r5, 0x2, 0x10000, r4)

18:50:12 executing program 7:
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xb4, 0x4000)
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000040))
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000080))
ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f00000000c0)={0x3, 0xffffffff, 0x77f, 0xd, 0x7f, 0x2f5c40})
r1 = syz_io_uring_complete(0x0)
ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000100))
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000140)=0x1, 0x4)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x1, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44008801}, 0x20040050)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x54}}, 0x20000000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xce0}]}, 0x24}}, 0x800)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder1\x00')
ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000500)={0x2, 0xffffffff, 0x1})
r3 = memfd_secret(0x80000)
setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000540)=0x1, 0x4)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000801)
ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000680))

18:50:12 executing program 1:
r0 = gettid()
wait4(r0, &(0x7f0000000000), 0x20000000, &(0x7f0000000040))
capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x4, 0xdbcc, 0x4, 0x0, 0x9, 0x200})
r1 = gettid()
waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000180))
getrusage(0x0, &(0x7f0000000240))
r2 = gettid()
sched_setaffinity(r2, 0x8, &(0x7f0000000300))
getpgrp(r0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000000640)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/200, 0xc8}], 0x3, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f0000000800)=""/71, 0x47}, {&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/30, 0x1e}, {&(0x7f00000009c0)=""/77, 0x4d}], 0x6, 0x0)
wait4(r2, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00))
r4 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
shmdt(r4)
ptrace$setopts(0x4200, r0, 0x43e800000000, 0x34)
ptrace$setopts(0x4206, r1, 0xffffffffffffffbe, 0x49)
ptrace$setopts(0x4200, 0x0, 0x8, 0x100024)

18:50:12 executing program 0:
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffff9)
r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "093e9c50778945f71fefb0ca520854807eae29f6646ad71d7fbf34e6ac1a3102ba0569cbccb04cc4329404314d072ed2a9afa8130d281fdfab9a956b9cbd2f82", 0x18}, 0x48, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$unlink(0x9, r1, r0)
add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffe)
keyctl$reject(0x13, r0, 0x100000000, 0x5, r1)
r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$negate(0xd, r1, 0x1, r2)
r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000480)='trusted\x00', &(0x7f00000004c0)='\'%\x00')
wait4(0xffffffffffffffff, &(0x7f0000000500), 0x2, &(0x7f0000000540))
r4 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x36, 0x36, 0x66, 0x32, 0x64, 0x0, 0x65, 0x0, 0x35, 0x61, 0x33, 0x62, 0x32, 0x62, 0x66, 0x31]}, &(0x7f0000000680)={0x0, "11d8542edbe8daee9bd791fc3a6e945607d6bafb287d01f97c706d4952314d8b67381c7c5174ca2300f1f536bc2ce9b1f6abc07f08efd915c6fddb878c4f6238", 0x1d}, 0x48, r0)
keyctl$link(0x8, r4, r3)
r5 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1)
r6 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r1)
keyctl$search(0xa, r5, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x1}, r6)
r7 = add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @desc4}, &(0x7f0000000900)={0x0, "1e93a933cc06cac3d0b7017ead50356794bad9e050d6f6211c9f668eef10bc1d6ab4ce4391dbe9be271154e0285b5668bfe7588ad0632d710f5ac3d8978395ac", 0x3e}, 0x48, r5)
keyctl$negate(0xd, 0x0, 0x3, r2)
add_key$fscrypt_provisioning(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x0}, &(0x7f0000000a00)={0x9f83cbc828044e11, 0x0, @a}, 0x48, r7)
keyctl$reject(0x13, r5, 0x2, 0x10000, r4)

18:50:12 executing program 2:
r0 = socket(0xa, 0x3, 0x5)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x7, {}, 0x4f, 0x4, 0x1, {0x0, 0x0, r0}}, 0xffff3aeb)
syz_io_uring_setup(0x716c, &(0x7f0000000040)={0x0, 0x86dc, 0x0, 0x1, 0x19a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
syz_io_uring_setup(0x7f, &(0x7f0000000140)={0x0, 0xf00a, 0x2, 0x3, 0x354}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x400, 0x23456}, 0x5)
pselect6(0x40, &(0x7f00000002c0)={0x9, 0x5, 0x52a, 0x3, 0xfff, 0x0, 0x7, 0x68d}, &(0x7f0000000300)={0x3, 0x5, 0x5, 0x101, 0xe9b, 0x3, 0xffff, 0x80}, &(0x7f0000000340)={0x20, 0x7, 0x800, 0x1, 0xf3f7, 0xfff, 0x8, 0x4}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0), 0x8})
ptrace$setopts(0x4206, 0xffffffffffffffff, 0x1, 0x42)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4)
prlimit64(0xffffffffffffffff, 0x3, &(0x7f00000004c0)={0x0, 0x4}, &(0x7f0000000500))
getpid()
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x280, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x5010}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4008850)
r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x9, 0x101800)
ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f00000006c0)={0x47, 0x1, 0x2, 0x40})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', <r5=>0x0, 0x7, 0x7800, 0x80000000, 0x3, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x66, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@noop]}}}}})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4)
sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r6, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ptrace$getsig(0x4202, 0x0, 0x3, &(0x7f0000000900))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000980)={'syztnl2\x00', <r7=>r5, 0x700, 0x80, 0x7, 0x9, {{0xc, 0x4, 0x0, 0x3b, 0x30, 0x64, 0x0, 0x3f, 0x0, 0x0, @rand_addr=0x64010101, @empty, {[@ssrr={0x89, 0x1b, 0x44, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @empty, @rand_addr=0x64010102, @loopback]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000ac0)={'gretap0\x00', &(0x7f0000000a40)={'syztnl2\x00', r7, 0xc7, 0x8, 0x1, 0x7f, {{0xb, 0x4, 0x1, 0x4, 0x2c, 0x68, 0x0, 0x81, 0x4, 0x0, @empty, @multicast1, {[@rr={0x7, 0x17, 0xab, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @multicast1]}]}}}}})

18:50:20 executing program 6:
getrusage(0xffffffffffffffff, &(0x7f0000000000))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'erspan0\x00', <r0=>0x0, 0x1, 0x700, 0x7, 0x100, {{0x9, 0x4, 0x3, 0x30, 0x24, 0x64, 0x0, 0x8, 0x4, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0xf, 0x4a, [@multicast2, @multicast1, @loopback]}]}}}}})
getrusage(0x1, &(0x7f0000000180))
r1 = memfd_secret(0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'syztnl0\x00', r0, 0x8000, 0x10, 0x4, 0x4, {{0x1a, 0x4, 0x1, 0x2e, 0x68, 0x64, 0x0, 0x7, 0x2f, 0x0, @local, @empty, {[@rr={0x7, 0xb, 0xf5, [@multicast1, @dev={0xac, 0x14, 0x14, 0x34}]}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x8, [{@private=0xa010101, 0x7}, {@private=0xa010102, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5ec}]}, @timestamp_prespec={0x44, 0x24, 0x2c, 0x3, 0xb, [{@empty, 0x5}, {@loopback, 0x8000000}, {@rand_addr=0x64010101, 0x8}, {@broadcast, 0xff}]}, @rr={0x7, 0x7, 0x48, [@multicast2]}]}}}}})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000380))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$802154_dgram(r2, &(0x7f0000001440)={&(0x7f00000003c0)={0x24, @long={0x3, 0xffff}}, 0x14, &(0x7f0000001400)={&(0x7f0000000400)="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", 0x1000}, 0x1, 0x0, 0x0, 0x8800}, 0x26040880)
stat(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getgid()
r6 = getgid()
setgroups(0x5, &(0x7f00000015c0)=[r4, r5, r6, 0xee00, 0x0])
r7 = syz_open_dev$hiddev(&(0x7f0000001600), 0x8c3e, 0x204000)
ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000001640)={0x3, 0x100, 0x3688})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001680)={'batadv0\x00', <r8=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000017c0)={'gretap0\x00', &(0x7f00000016c0)={'tunl0\x00', r8, 0x10, 0x20, 0x3, 0x101, {{0x2d, 0x4, 0x1, 0x1d, 0xb4, 0x68, 0x0, 0xff, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0x3a, 0x1, 0x9, [{@multicast2, 0x8}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x6}]}, @rr={0x7, 0xf, 0x58, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0xc6, 0x3, 0x6, [{@multicast1, 0x6}, {@multicast1, 0x34}]}, @timestamp_prespec={0x44, 0x34, 0x82, 0x3, 0x5, [{@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010101, 0x8001}, {@private=0xa010102, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x1a}}, {@multicast2, 0x4}]}, @rr={0x7, 0x1b, 0x12, [@multicast2, @empty, @multicast2, @private=0xa010100, @multicast2, @empty]}, @lsrr={0x83, 0xf, 0x8f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010101]}]}}}}})
clock_gettime(0x5, &(0x7f0000001800))
ioctl$HIDIOCGFLAG(r7, 0x8004480e, &(0x7f0000001840))
sched_rr_get_interval(0x0, &(0x7f0000001880))

18:50:20 executing program 7:
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xb4, 0x4000)
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000040))
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000080))
ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f00000000c0)={0x3, 0xffffffff, 0x77f, 0xd, 0x7f, 0x2f5c40})
r1 = syz_io_uring_complete(0x0)
ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000100))
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000140)=0x1, 0x4)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x1, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44008801}, 0x20040050)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x54}}, 0x20000000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xce0}]}, 0x24}}, 0x800)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder1\x00')
ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000500)={0x2, 0xffffffff, 0x1})
r3 = memfd_secret(0x80000)
setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000540)=0x1, 0x4)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000801)

18:50:20 executing program 5:
r0 = gettid()
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x300, 0x70bd2a, 0x25dfdbfb, {0x20, 0x0, 0x0, r0, 0xffffffff, 0x8, 0xc2, 0x3, 0x0, 0x9}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x21}, 0x400)
ptrace$getregs(0xe, r0, 0x1, &(0x7f0000000100)=""/250)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x93}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044010}, 0x20008040)
r1 = syz_io_uring_complete(0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20048041)
getpid()
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7bc}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
r3 = memfd_secret(0x80000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r2)
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r3)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000057}, 0x20048000)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000840), 0x2000, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0xe00, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4814}, 0x50)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99a}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x62cc}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0x0)
prctl$PR_GET_SECCOMP(0x15)
r7 = syz_open_dev$hiddev(&(0x7f0000000ac0), 0x2, 0x2000)
ioctl$HIDIOCAPPLICATION(r7, 0x4802, 0x4)

18:50:20 executing program 2:
r0 = socket(0xa, 0x3, 0x5)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x7, {}, 0x4f, 0x4, 0x1, {0x0, 0x0, r0}}, 0xffff3aeb)
syz_io_uring_setup(0x716c, &(0x7f0000000040)={0x0, 0x86dc, 0x0, 0x1, 0x19a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
syz_io_uring_setup(0x7f, &(0x7f0000000140)={0x0, 0xf00a, 0x2, 0x3, 0x354}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x400, 0x23456}, 0x5)
pselect6(0x40, &(0x7f00000002c0)={0x9, 0x5, 0x52a, 0x3, 0xfff, 0x0, 0x7, 0x68d}, &(0x7f0000000300)={0x3, 0x5, 0x5, 0x101, 0xe9b, 0x3, 0xffff, 0x80}, &(0x7f0000000340)={0x20, 0x7, 0x800, 0x1, 0xf3f7, 0xfff, 0x8, 0x4}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0), 0x8})
ptrace$setopts(0x4206, 0xffffffffffffffff, 0x1, 0x42)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4)
prlimit64(0xffffffffffffffff, 0x3, &(0x7f00000004c0)={0x0, 0x4}, &(0x7f0000000500))
getpid()
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x280, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x5010}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4008850)
r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x9, 0x101800)
ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f00000006c0)={0x47, 0x1, 0x2, 0x40})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', <r5=>0x0, 0x7, 0x7800, 0x80000000, 0x3, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x66, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@noop]}}}}})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4)
sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r6, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ptrace$getsig(0x4202, 0x0, 0x3, &(0x7f0000000900))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000980)={'syztnl2\x00', <r7=>r5, 0x700, 0x80, 0x7, 0x9, {{0xc, 0x4, 0x0, 0x3b, 0x30, 0x64, 0x0, 0x3f, 0x0, 0x0, @rand_addr=0x64010101, @empty, {[@ssrr={0x89, 0x1b, 0x44, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @empty, @rand_addr=0x64010102, @loopback]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000ac0)={'gretap0\x00', &(0x7f0000000a40)={'syztnl2\x00', r7, 0xc7, 0x8, 0x1, 0x7f, {{0xb, 0x4, 0x1, 0x4, 0x2c, 0x68, 0x0, 0x81, 0x4, 0x0, @empty, @multicast1, {[@rr={0x7, 0x17, 0xab, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @multicast1]}]}}}}})

18:50:20 executing program 0:
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffff9)
r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "093e9c50778945f71fefb0ca520854807eae29f6646ad71d7fbf34e6ac1a3102ba0569cbccb04cc4329404314d072ed2a9afa8130d281fdfab9a956b9cbd2f82", 0x18}, 0x48, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$unlink(0x9, r1, r0)
add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffe)
keyctl$reject(0x13, r0, 0x100000000, 0x5, r1)
r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$negate(0xd, r1, 0x1, r2)
r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000480)='trusted\x00', &(0x7f00000004c0)='\'%\x00')
wait4(0xffffffffffffffff, &(0x7f0000000500), 0x2, &(0x7f0000000540))
r4 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x36, 0x36, 0x66, 0x32, 0x64, 0x0, 0x65, 0x0, 0x35, 0x61, 0x33, 0x62, 0x32, 0x62, 0x66, 0x31]}, &(0x7f0000000680)={0x0, "11d8542edbe8daee9bd791fc3a6e945607d6bafb287d01f97c706d4952314d8b67381c7c5174ca2300f1f536bc2ce9b1f6abc07f08efd915c6fddb878c4f6238", 0x1d}, 0x48, r0)
keyctl$link(0x8, r4, r3)
r5 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1)
r6 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r1)
keyctl$search(0xa, r5, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x1}, r6)
add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @desc4}, &(0x7f0000000900)={0x0, "1e93a933cc06cac3d0b7017ead50356794bad9e050d6f6211c9f668eef10bc1d6ab4ce4391dbe9be271154e0285b5668bfe7588ad0632d710f5ac3d8978395ac", 0x3e}, 0x48, r5)
keyctl$negate(0xd, 0x0, 0x3, r2)
keyctl$reject(0x13, r5, 0x2, 0x10000, r4)

18:50:20 executing program 3:
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)={0x2f, "2e6adc11724e8c894f599b533284843801a0f38ce71188d5d60f3d44e486709059c98dff34274d375f0d0726b61a36"})
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000040)={0x35, "60cff0d7807be30600a7215bdada937b7a404e613323661be117da010365c218c66a0ae6f2af4fcccd40f5243f0b4bde080d3c67ba"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {}, 0x1}, 0x7f)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x1)
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f00000000c0))
r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x55e, 0x220000)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000140)=0x2)
r1 = io_uring_setup(0x5b2b, &(0x7f0000000180)={0x0, 0xf841, 0x8, 0x1, 0x1c2})
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = getuid()
setresuid(0xffffffffffffffff, 0x0, r2)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000200)={0x3, 0x2, 0xab9, 0x6, 0x3, 0x3ff})
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000240))
r3 = syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x4c0140)
ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f00000002c0)=0x3)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0)
setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000400), 0x4)

18:50:20 executing program 4:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8804, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r1=>0x0, 0x4, 0x40, 0x20, 0x3, 0x18, @loopback, @local, 0x7, 0x40, 0x1f, 0x2}})
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000880)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010)
ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000004c0)={0x1, 0xffffffff, 0x7b})
socketpair(0x2c, 0x80006, 0x6, &(0x7f0000000500)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000640)=0xe8)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004895}, 0x8000)
read$hiddev(r0, &(0x7f0000000780)=""/133, 0x85)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90)
socketpair(0x1e, 0x3, 0x9, &(0x7f0000000940)={<r6=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'})
setresuid(0xffffffffffffffff, r5, r5)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000009c0), 0x20180, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@initdev, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000b00)=0xe8)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x4004)

18:50:20 executing program 1:
r0 = gettid()
wait4(r0, &(0x7f0000000000), 0x20000000, &(0x7f0000000040))
capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x4, 0xdbcc, 0x4, 0x0, 0x9, 0x200})
r1 = gettid()
waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000180))
getrusage(0x0, &(0x7f0000000240))
r2 = gettid()
sched_setaffinity(r2, 0x8, &(0x7f0000000300))
getpgrp(r0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000000640)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/200, 0xc8}], 0x3, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f0000000800)=""/71, 0x47}, {&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/30, 0x1e}, {&(0x7f00000009c0)=""/77, 0x4d}], 0x6, 0x0)
wait4(r2, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00))
r4 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
shmdt(r4)
ptrace$setopts(0x4200, r0, 0x43e800000000, 0x34)
ptrace$setopts(0x4200, 0x0, 0x8, 0x100024)

18:50:21 executing program 0:
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffff9)
r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "093e9c50778945f71fefb0ca520854807eae29f6646ad71d7fbf34e6ac1a3102ba0569cbccb04cc4329404314d072ed2a9afa8130d281fdfab9a956b9cbd2f82", 0x18}, 0x48, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$unlink(0x9, r1, r0)
add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffe)
keyctl$reject(0x13, r0, 0x100000000, 0x5, r1)
r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$negate(0xd, r1, 0x1, r2)
r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000480)='trusted\x00', &(0x7f00000004c0)='\'%\x00')
wait4(0xffffffffffffffff, &(0x7f0000000500), 0x2, &(0x7f0000000540))
r4 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x36, 0x36, 0x66, 0x32, 0x64, 0x0, 0x65, 0x0, 0x35, 0x61, 0x33, 0x62, 0x32, 0x62, 0x66, 0x31]}, &(0x7f0000000680)={0x0, "11d8542edbe8daee9bd791fc3a6e945607d6bafb287d01f97c706d4952314d8b67381c7c5174ca2300f1f536bc2ce9b1f6abc07f08efd915c6fddb878c4f6238", 0x1d}, 0x48, r0)
keyctl$link(0x8, r4, r3)
r5 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1)
r6 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r1)
keyctl$search(0xa, r5, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x1}, r6)
add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @desc4}, &(0x7f0000000900)={0x0, "1e93a933cc06cac3d0b7017ead50356794bad9e050d6f6211c9f668eef10bc1d6ab4ce4391dbe9be271154e0285b5668bfe7588ad0632d710f5ac3d8978395ac", 0x3e}, 0x48, r5)
keyctl$reject(0x13, r5, 0x2, 0x10000, r4)

18:50:21 executing program 1:
r0 = gettid()
wait4(r0, &(0x7f0000000000), 0x20000000, &(0x7f0000000040))
capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x4, 0xdbcc, 0x4, 0x0, 0x9, 0x200})
r1 = gettid()
waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000180))
getrusage(0x0, &(0x7f0000000240))
r2 = gettid()
sched_setaffinity(r2, 0x8, &(0x7f0000000300))
getpgrp(r0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000000640)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/200, 0xc8}], 0x3, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f0000000800)=""/71, 0x47}, {&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/30, 0x1e}, {&(0x7f00000009c0)=""/77, 0x4d}], 0x6, 0x0)
wait4(r2, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00))
r4 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
shmdt(r4)
ptrace$setopts(0x4200, 0x0, 0x8, 0x100024)

18:50:21 executing program 7:
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xb4, 0x4000)
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000040))
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000080))
ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f00000000c0)={0x3, 0xffffffff, 0x77f, 0xd, 0x7f, 0x2f5c40})
r1 = syz_io_uring_complete(0x0)
ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000100))
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000140)=0x1, 0x4)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x1, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44008801}, 0x20040050)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x54}}, 0x20000000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xce0}]}, 0x24}}, 0x800)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder1\x00')
ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000500)={0x2, 0xffffffff, 0x1})
r3 = memfd_secret(0x80000)
setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000540)=0x1, 0x4)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000801)

[  115.500047] 
[  115.500355] =====================================
[  115.501013] WARNING: bad unlock balance detected!
[  115.501738] 6.19.0-rc5-next-20260116 #1 Not tainted
[  115.502459] -------------------------------------
[  115.503114] syz-executor.7/4026 is trying to release lock (rcu_read_lock) at:
[  115.509611] [<ffffffff81c1dee5>] __wait_on_freeing_inode+0x105/0x350
[  115.510558] but there are no more locks to release!
[  115.511250] 
[  115.511250] other info that might help us debug this:
[  115.512198] 4 locks held by syz-executor.7/4026:
[  115.512891]  #0: ffff88800f9c03f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  115.514198]  #1: ffff88803c9403e0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  115.515671]  #2: ffff88800f9c4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  115.517002]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  115.518380] 
[  115.518380] stack backtrace:
[  115.519041] CPU: 0 UID: 0 PID: 4026 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  115.519067] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  115.519079] Call Trace:
[  115.519086]  <TASK>
[  115.519093]  dump_stack_lvl+0xca/0x120
[  115.519136]  ? __wait_on_freeing_inode+0x105/0x350
[  115.519162]  print_unlock_imbalance_bug+0x118/0x130
[  115.519188]  ? __wait_on_freeing_inode+0x105/0x350
[  115.519214]  lock_release+0x1ee/0x270
[  115.519241]  __wait_on_freeing_inode+0x10a/0x350
[  115.519268]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  115.519296]  ? __pfx_var_wake_function+0x10/0x10
[  115.519327]  ? lock_is_held_type+0x9e/0x120
[  115.519348]  insert_inode_locked+0x25f/0x890
[  115.519379]  __ext4_new_inode+0x223d/0x4cd0
[  115.519409]  ? __pfx___ext4_new_inode+0x10/0x10
[  115.519435]  ? __pfx___dquot_initialize+0x10/0x10
[  115.519468]  ? __pfx_avc_has_perm+0x10/0x10
[  115.519496]  ext4_symlink+0x623/0xb40
[  115.519529]  ? __pfx_ext4_symlink+0x10/0x10
[  115.519558]  ? security_inode_permission+0x72/0xe0
[  115.519582]  vfs_symlink+0x44b/0x840
[  115.519611]  filename_symlinkat+0x158/0x440
[  115.519637]  ? __pfx_filename_symlinkat+0x10/0x10
[  115.519662]  ? strncpy_from_user+0x21b/0x2f0
[  115.519692]  __x64_sys_symlink+0x82/0x110
[  115.519716]  do_syscall_64+0xbf/0x420
[  115.519740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.519762] RIP: 0033:0x7f179fd49427
[  115.519778] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  115.519797] RSP: 002b:00007ffccf5be078 EFLAGS: 00000206 ORIG_RAX: 0000000000000058
[  115.519817] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f179fd49427
[  115.519831] RDX: 00007ffccf5be153 RSI: 00007f179fda4022 RDI: 00007ffccf5be140
[  115.519845] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffccf5bdf10
[  115.519857] R10: 00007ffccf5bddc7 R11: 0000000000000206 R12: 0000000000000001
[  115.519870] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffccf5be140
[  115.519889]  </TASK>
[  115.550047] ------------[ cut here ]------------
[  115.553596] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.7/4026
[  115.555392] Modules linked in:
[  115.556080] CPU: 0 UID: 0 PID: 4026 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  115.557949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  115.559229] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  115.560161] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9
[  115.562952] RSP: 0018:ffff888044c8f9a0 EFLAGS: 00010286
[  115.563735] RAX: 00000000ffffffff RBX: ffff88800a151b80 RCX: ffffffff815660f7
[  115.564907] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88800a151f7c
[  115.566034] RBP: ffff88800a151b80 R08: 0000000000000000 R09: fffffbfff0ba7040
[  115.567154] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800a151b80
[  115.568271] R13: 0000000000000001 R14: ffffffff85c0d600 R15: ffff88803c8a0318
[  115.569380] FS:  000055557e298400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000
[  115.570633] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  115.571700] CR2: 000055557e298708 CR3: 000000003e4bc000 CR4: 0000000000350ef0
[  115.572981] Call Trace:
[  115.573546]  <TASK>
[  115.575129]  __wait_on_freeing_inode+0x10f/0x350
[  115.576647]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  115.579021]  ? __pfx_var_wake_function+0x10/0x10
[  115.581377]  ? lock_is_held_type+0x9e/0x120
[  115.583773]  insert_inode_locked+0x25f/0x890
[  115.587249]  __ext4_new_inode+0x223d/0x4cd0
[  115.592971]  ? __pfx___ext4_new_inode+0x10/0x10
[  115.595307]  ? __pfx___dquot_initialize+0x10/0x10
[  115.596750]  ? __pfx_avc_has_perm+0x10/0x10
[  115.600239]  ext4_symlink+0x623/0xb40
[  115.605179]  ? __pfx_ext4_symlink+0x10/0x10
[  115.607341]  ? security_inode_permission+0x72/0xe0
[  115.610436]  vfs_symlink+0x44b/0x840
[  115.613114]  filename_symlinkat+0x158/0x440
[  115.615667]  ? __pfx_filename_symlinkat+0x10/0x10
[  115.617349]  ? strncpy_from_user+0x21b/0x2f0
[  115.620959]  __x64_sys_symlink+0x82/0x110
[  115.622336]  do_syscall_64+0xbf/0x420
[  115.623819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.624994] RIP: 0033:0x7f179fd49427
[  115.625787] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  115.628689] RSP: 002b:00007ffccf5be078 EFLAGS: 00000206 ORIG_RAX: 0000000000000058
[  115.630082] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f179fd49427
[  115.631222] RDX: 00007ffccf5be153 RSI: 00007f179fda4022 RDI: 00007ffccf5be140
[  115.632597] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffccf5bdf10
[  115.633805] R10: 00007ffccf5bddc7 R11: 0000000000000206 R12: 0000000000000001
[  115.635097] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffccf5be140
[  115.647302]  </TASK>
[  115.647778] irq event stamp: 339
[  115.648372] hardirqs last  enabled at (339): [<ffffffff84ced36b>] irqentry_exit+0x17b/0x650
[  115.650023] hardirqs last disabled at (337): [<ffffffff813c1f5e>] handle_softirqs+0x65e/0x7d0
[  115.651570] softirqs last  enabled at (338): [<ffffffff813c2204>] __irq_exit_rcu+0xc4/0x100
[  115.653019] softirqs last disabled at (333): [<ffffffff813c2204>] __irq_exit_rcu+0xc4/0x100
[  115.654463] ---[ end trace 0000000000000000 ]---
18:50:28 executing program 0:
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffff9)
r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "093e9c50778945f71fefb0ca520854807eae29f6646ad71d7fbf34e6ac1a3102ba0569cbccb04cc4329404314d072ed2a9afa8130d281fdfab9a956b9cbd2f82", 0x18}, 0x48, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$unlink(0x9, r1, r0)
add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffe)
keyctl$reject(0x13, r0, 0x100000000, 0x5, r1)
r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$negate(0xd, r1, 0x1, r2)
r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000480)='trusted\x00', &(0x7f00000004c0)='\'%\x00')
wait4(0xffffffffffffffff, &(0x7f0000000500), 0x2, &(0x7f0000000540))
r4 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x36, 0x36, 0x66, 0x32, 0x64, 0x0, 0x65, 0x0, 0x35, 0x61, 0x33, 0x62, 0x32, 0x62, 0x66, 0x31]}, &(0x7f0000000680)={0x0, "11d8542edbe8daee9bd791fc3a6e945607d6bafb287d01f97c706d4952314d8b67381c7c5174ca2300f1f536bc2ce9b1f6abc07f08efd915c6fddb878c4f6238", 0x1d}, 0x48, r0)
keyctl$link(0x8, r4, r3)
r5 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1)
r6 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r1)
keyctl$search(0xa, r5, &(0x7f0000000780)='trusted\x00', &(0x7f00000007c0)={'syz', 0x1}, r6)
keyctl$reject(0x13, r5, 0x2, 0x10000, r4)

18:50:28 executing program 7:
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xb4, 0x4000)
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000040))
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000080))
ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f00000000c0)={0x3, 0xffffffff, 0x77f, 0xd, 0x7f, 0x2f5c40})
r1 = syz_io_uring_complete(0x0)
ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000100))
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000140)=0x1, 0x4)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x1, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44008801}, 0x20040050)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x54}}, 0x20000000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xce0}]}, 0x24}}, 0x800)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder1\x00')
ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000500)={0x2, 0xffffffff, 0x1})
r3 = memfd_secret(0x80000)
setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000540)=0x1, 0x4)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000801)

18:50:28 executing program 6:
getrusage(0xffffffffffffffff, &(0x7f0000000000))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'erspan0\x00', <r0=>0x0, 0x1, 0x700, 0x7, 0x100, {{0x9, 0x4, 0x3, 0x30, 0x24, 0x64, 0x0, 0x8, 0x4, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0xf, 0x4a, [@multicast2, @multicast1, @loopback]}]}}}}})
getrusage(0x1, &(0x7f0000000180))
r1 = memfd_secret(0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'syztnl0\x00', r0, 0x8000, 0x10, 0x4, 0x4, {{0x1a, 0x4, 0x1, 0x2e, 0x68, 0x64, 0x0, 0x7, 0x2f, 0x0, @local, @empty, {[@rr={0x7, 0xb, 0xf5, [@multicast1, @dev={0xac, 0x14, 0x14, 0x34}]}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x8, [{@private=0xa010101, 0x7}, {@private=0xa010102, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5ec}]}, @timestamp_prespec={0x44, 0x24, 0x2c, 0x3, 0xb, [{@empty, 0x5}, {@loopback, 0x8000000}, {@rand_addr=0x64010101, 0x8}, {@broadcast, 0xff}]}, @rr={0x7, 0x7, 0x48, [@multicast2]}]}}}}})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0)
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000380))
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$802154_dgram(r2, &(0x7f0000001440)={&(0x7f00000003c0)={0x24, @long={0x3, 0xffff}}, 0x14, &(0x7f0000001400)={&(0x7f0000000400)="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", 0x1000}, 0x1, 0x0, 0x0, 0x8800}, 0x26040880)
stat(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getgid()
r6 = getgid()
setgroups(0x5, &(0x7f00000015c0)=[r4, r5, r6, 0xee00, 0x0])
r7 = syz_open_dev$hiddev(&(0x7f0000001600), 0x8c3e, 0x204000)
ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000001640)={0x3, 0x100, 0x3688})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001680)={'batadv0\x00', <r8=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000017c0)={'gretap0\x00', &(0x7f00000016c0)={'tunl0\x00', r8, 0x10, 0x20, 0x3, 0x101, {{0x2d, 0x4, 0x1, 0x1d, 0xb4, 0x68, 0x0, 0xff, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0x3a, 0x1, 0x9, [{@multicast2, 0x8}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x6}]}, @rr={0x7, 0xf, 0x58, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0xc6, 0x3, 0x6, [{@multicast1, 0x6}, {@multicast1, 0x34}]}, @timestamp_prespec={0x44, 0x34, 0x82, 0x3, 0x5, [{@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010101, 0x8001}, {@private=0xa010102, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x1a}}, {@multicast2, 0x4}]}, @rr={0x7, 0x1b, 0x12, [@multicast2, @empty, @multicast2, @private=0xa010100, @multicast2, @empty]}, @lsrr={0x83, 0xf, 0x8f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010101]}]}}}}})
clock_gettime(0x5, &(0x7f0000001800))
ioctl$HIDIOCGFLAG(r7, 0x8004480e, &(0x7f0000001840))
sched_rr_get_interval(0x0, &(0x7f0000001880))

18:50:28 executing program 5:
r0 = gettid()
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x300, 0x70bd2a, 0x25dfdbfb, {0x20, 0x0, 0x0, r0, 0xffffffff, 0x8, 0xc2, 0x3, 0x0, 0x9}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x21}, 0x400)
ptrace$getregs(0xe, r0, 0x1, &(0x7f0000000100)=""/250)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x93}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x100}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044010}, 0x20008040)
r1 = syz_io_uring_complete(0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20048041)
getpid()
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7bc}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
r3 = memfd_secret(0x80000)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r2)
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r4, 0x10, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r3)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000057}, 0x20048000)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000840), 0x2000, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0xe00, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4814}, 0x50)
sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99a}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x62cc}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}}, 0x0)
prctl$PR_GET_SECCOMP(0x15)
r7 = syz_open_dev$hiddev(&(0x7f0000000ac0), 0x2, 0x2000)
ioctl$HIDIOCAPPLICATION(r7, 0x4802, 0x4)

18:50:28 executing program 1:
r0 = gettid()
wait4(r0, &(0x7f0000000000), 0x20000000, &(0x7f0000000040))
capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x4, 0xdbcc, 0x4, 0x0, 0x9, 0x200})
r1 = gettid()
waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000180))
getrusage(0x0, &(0x7f0000000240))
r2 = gettid()
sched_setaffinity(r2, 0x8, &(0x7f0000000300))
getpgrp(r0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000000640)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/200, 0xc8}], 0x3, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f0000000800)=""/71, 0x47}, {&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/30, 0x1e}, {&(0x7f00000009c0)=""/77, 0x4d}], 0x6, 0x0)
wait4(r2, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00))
shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x6000)
ptrace$setopts(0x4200, 0x0, 0x8, 0x100024)

18:50:28 executing program 2:
r0 = socket(0xa, 0x3, 0x5)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x7, {}, 0x4f, 0x4, 0x1, {0x0, 0x0, r0}}, 0xffff3aeb)
syz_io_uring_setup(0x716c, &(0x7f0000000040)={0x0, 0x86dc, 0x0, 0x1, 0x19a}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100))
syz_io_uring_setup(0x7f, &(0x7f0000000140)={0x0, 0xf00a, 0x2, 0x3, 0x354}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x400, 0x23456}, 0x5)
pselect6(0x40, &(0x7f00000002c0)={0x9, 0x5, 0x52a, 0x3, 0xfff, 0x0, 0x7, 0x68d}, &(0x7f0000000300)={0x3, 0x5, 0x5, 0x101, 0xe9b, 0x3, 0xffff, 0x80}, &(0x7f0000000340)={0x20, 0x7, 0x800, 0x1, 0xf3f7, 0xfff, 0x8, 0x4}, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400)={&(0x7f00000003c0), 0x8})
ptrace$setopts(0x4206, 0xffffffffffffffff, 0x1, 0x42)
getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4)
prlimit64(0xffffffffffffffff, 0x3, &(0x7f00000004c0)={0x0, 0x4}, &(0x7f0000000500))
getpid()
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x280, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x5010}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4008850)
r4 = syz_open_dev$vcsn(&(0x7f0000000680), 0x9, 0x101800)
ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f00000006c0)={0x47, 0x1, 0x2, 0x40})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000700)={'syztnl1\x00', <r5=>0x0, 0x7, 0x7800, 0x80000000, 0x3, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x66, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@noop]}}}}})
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4)
sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r6, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ptrace$getsig(0x4202, 0x0, 0x3, &(0x7f0000000900))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000980)={'syztnl2\x00', r5, 0x700, 0x80, 0x7, 0x9, {{0xc, 0x4, 0x0, 0x3b, 0x30, 0x64, 0x0, 0x3f, 0x0, 0x0, @rand_addr=0x64010101, @empty, {[@ssrr={0x89, 0x1b, 0x44, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @empty, @rand_addr=0x64010102, @loopback]}]}}}}})

18:50:28 executing program 4:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8804, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r1=>0x0, 0x4, 0x40, 0x20, 0x3, 0x18, @loopback, @local, 0x7, 0x40, 0x1f, 0x2}})
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000880)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010)
ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000004c0)={0x1, 0xffffffff, 0x7b})
socketpair(0x2c, 0x80006, 0x6, &(0x7f0000000500)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000640)=0xe8)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004895}, 0x8000)
read$hiddev(r0, &(0x7f0000000780)=""/133, 0x85)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90)
socketpair(0x1e, 0x3, 0x9, &(0x7f0000000940)={<r6=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'})
setresuid(0xffffffffffffffff, r5, r5)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000009c0), 0x20180, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@initdev, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000b00)=0xe8)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x4004)

18:50:28 executing program 3:
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)={0x2f, "2e6adc11724e8c894f599b533284843801a0f38ce71188d5d60f3d44e486709059c98dff34274d375f0d0726b61a36"})
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000040)={0x35, "60cff0d7807be30600a7215bdada937b7a404e613323661be117da010365c218c66a0ae6f2af4fcccd40f5243f0b4bde080d3c67ba"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {}, 0x1}, 0x7f)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x1)
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f00000000c0))
r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x55e, 0x220000)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000140)=0x2)
r1 = io_uring_setup(0x5b2b, &(0x7f0000000180)={0x0, 0xf841, 0x8, 0x1, 0x1c2})
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = getuid()
setresuid(0xffffffffffffffff, 0x0, r2)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000200)={0x3, 0x2, 0xab9, 0x6, 0x3, 0x3ff})
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000240))
syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x4c0140)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0)
setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000400), 0x4)

18:50:28 executing program 0:
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffff9)
r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "093e9c50778945f71fefb0ca520854807eae29f6646ad71d7fbf34e6ac1a3102ba0569cbccb04cc4329404314d072ed2a9afa8130d281fdfab9a956b9cbd2f82", 0x18}, 0x48, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$unlink(0x9, r1, r0)
add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffe)
keyctl$reject(0x13, r0, 0x100000000, 0x5, r1)
r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$negate(0xd, r1, 0x1, r2)
r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000480)='trusted\x00', &(0x7f00000004c0)='\'%\x00')
wait4(0xffffffffffffffff, &(0x7f0000000500), 0x2, &(0x7f0000000540))
r4 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x36, 0x36, 0x66, 0x32, 0x64, 0x0, 0x65, 0x0, 0x35, 0x61, 0x33, 0x62, 0x32, 0x62, 0x66, 0x31]}, &(0x7f0000000680)={0x0, "11d8542edbe8daee9bd791fc3a6e945607d6bafb287d01f97c706d4952314d8b67381c7c5174ca2300f1f536bc2ce9b1f6abc07f08efd915c6fddb878c4f6238", 0x1d}, 0x48, r0)
keyctl$link(0x8, r4, r3)
r5 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1)
add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r1)
keyctl$reject(0x13, r5, 0x2, 0x10000, r4)

18:50:28 executing program 0:
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffff9)
r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "093e9c50778945f71fefb0ca520854807eae29f6646ad71d7fbf34e6ac1a3102ba0569cbccb04cc4329404314d072ed2a9afa8130d281fdfab9a956b9cbd2f82", 0x18}, 0x48, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$unlink(0x9, r1, r0)
add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffe)
keyctl$reject(0x13, r0, 0x100000000, 0x5, r1)
r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$negate(0xd, r1, 0x1, r2)
r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000480)='trusted\x00', &(0x7f00000004c0)='\'%\x00')
wait4(0xffffffffffffffff, &(0x7f0000000500), 0x2, &(0x7f0000000540))
r4 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x36, 0x36, 0x66, 0x32, 0x64, 0x0, 0x65, 0x0, 0x35, 0x61, 0x33, 0x62, 0x32, 0x62, 0x66, 0x31]}, &(0x7f0000000680)={0x0, "11d8542edbe8daee9bd791fc3a6e945607d6bafb287d01f97c706d4952314d8b67381c7c5174ca2300f1f536bc2ce9b1f6abc07f08efd915c6fddb878c4f6238", 0x1d}, 0x48, r0)
keyctl$link(0x8, r4, r3)
r5 = add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1)
keyctl$reject(0x13, r5, 0x2, 0x10000, r4)

18:50:28 executing program 3:
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000000)={0x2f, "2e6adc11724e8c894f599b533284843801a0f38ce71188d5d60f3d44e486709059c98dff34274d375f0d0726b61a36"})
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000040)={0x35, "60cff0d7807be30600a7215bdada937b7a404e613323661be117da010365c218c66a0ae6f2af4fcccd40f5243f0b4bde080d3c67ba"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {}, 0x1}, 0x7f)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x1)
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f00000000c0))
r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0x55e, 0x220000)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000140)=0x2)
r1 = io_uring_setup(0x5b2b, &(0x7f0000000180)={0x0, 0xf841, 0x8, 0x1, 0x1c2})
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
r2 = getuid()
setresuid(0xffffffffffffffff, 0x0, r2)
ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000200)={0x3, 0x2, 0xab9, 0x6, 0x3, 0x3ff})
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000240))
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0)
setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000400), 0x4)

18:50:28 executing program 4:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8804, 0x0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r1=>0x0, 0x4, 0x40, 0x20, 0x3, 0x18, @loopback, @local, 0x7, 0x40, 0x1f, 0x2}})
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000880)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010)
ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f00000004c0)={0x1, 0xffffffff, 0x7b})
socketpair(0x2c, 0x80006, 0x6, &(0x7f0000000500)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000640)=0xe8)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004895}, 0x8000)
read$hiddev(r0, &(0x7f0000000780)=""/133, 0x85)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90)
socketpair(0x1e, 0x3, 0x9, &(0x7f0000000940)={<r6=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'})
setresuid(0xffffffffffffffff, r5, r5)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000009c0), 0x20180, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@initdev, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000b00)=0xe8)

18:50:28 executing program 0:
add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffff9)
r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "093e9c50778945f71fefb0ca520854807eae29f6646ad71d7fbf34e6ac1a3102ba0569cbccb04cc4329404314d072ed2a9afa8130d281fdfab9a956b9cbd2f82", 0x18}, 0x48, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0)
keyctl$unlink(0x9, r1, r0)
add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffe)
keyctl$reject(0x13, r0, 0x100000000, 0x5, r1)
r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$negate(0xd, r1, 0x1, r2)
r3 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000480)='trusted\x00', &(0x7f00000004c0)='\'%\x00')
wait4(0xffffffffffffffff, &(0x7f0000000500), 0x2, &(0x7f0000000540))
r4 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x36, 0x36, 0x66, 0x32, 0x64, 0x0, 0x65, 0x0, 0x35, 0x61, 0x33, 0x62, 0x32, 0x62, 0x66, 0x31]}, &(0x7f0000000680)={0x0, "11d8542edbe8daee9bd791fc3a6e945607d6bafb287d01f97c706d4952314d8b67381c7c5174ca2300f1f536bc2ce9b1f6abc07f08efd915c6fddb878c4f6238", 0x1d}, 0x48, r0)
keyctl$link(0x8, r4, r3)
keyctl$reject(0x13, 0x0, 0x2, 0x10000, r4)

18:50:28 executing program 7:
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xb4, 0x4000)
ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000040))
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000080))
ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f00000000c0)={0x3, 0xffffffff, 0x77f, 0xd, 0x7f, 0x2f5c40})
r1 = syz_io_uring_complete(0x0)
ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000100))
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000140)=0x1, 0x4)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x1, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x44008801}, 0x20040050)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x20000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x54}}, 0x20000000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xce0}]}, 0x24}}, 0x800)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder1\x00')
ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000500)={0x2, 0xffffffff, 0x1})
r3 = memfd_secret(0x80000)
setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000540)=0x1, 0x4)
ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000680))

18:50:28 executing program 1:
r0 = gettid()
wait4(r0, &(0x7f0000000000), 0x20000000, &(0x7f0000000040))
capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x4, 0xdbcc, 0x4, 0x0, 0x9, 0x200})
r1 = gettid()
waitid(0x0, r1, 0x0, 0x8, &(0x7f0000000180))
getrusage(0x0, &(0x7f0000000240))
r2 = gettid()
sched_setaffinity(r2, 0x8, &(0x7f0000000300))
getpgrp(r0)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000000640)=[{&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/200, 0xc8}], 0x3, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f0000000800)=""/71, 0x47}, {&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/30, 0x1e}, {&(0x7f00000009c0)=""/77, 0x4d}], 0x6, 0x0)
wait4(r2, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00))
ptrace$setopts(0x4200, 0x0, 0x8, 0x100024)


VM DIAGNOSIS:
18:50:21  Registers:
info registers vcpu 0
RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff888044c8f4a8
R8 =0000000000000000 R9 =ffffed1001685046 R10=0000000000000072 R11=206f7420676e6973
R12=0000000000000072 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120
RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055557e298400 00000000 00000000
GS =0000 ffff8880e5342000 00000000 00000000
LDT=0000 fffffe4000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055557e298708 CR3=000000003e4bc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11
RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801abb7b10
R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000
R12=1ffff11003576f63 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801abb7b48
RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555571e60400 00000000 00000000
GS =0000 ffff8880e5442000 00000000 00000000
LDT=0000 ffff888000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9a09a9a6f4 CR3=000000000baa5000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000