0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x8c, "343ea739df039afbe11b7ccacb690949522e715c06d0ec3cf8792476f21d5c00b35ebd8d076b50bd480f543e8977e967cc0400c103eb8094bae2f09377821bc052de5339c2e45405c5cf7dab5444f03aad6995ded6237da095d000c249d33408ddcd04576ce2367be0875e81ddcde0beed73c28914eeba93fb17894403120c7de14970d15c939a5b0fbb1650"}, &(0x7f0000000900)=0xb0) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a00), 0x10000, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000a40)={'filter\x00', 0x0, 0x0, 0x0, [0x800, 0x0, 0x1, 0x7ff0000000000, 0x5, 0x9]}, &(0x7f0000000ac0)=0x78) 22:58:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8894) [ 2225.900899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2225.905380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 22:58:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8894) 22:58:48 executing program 1: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000900)={@multicast1, @multicast2, r4}, 0xc) 22:58:48 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000009c0)={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x7, 0x50fb, 0x20, 0x500, 0x6, 0x800022, r8}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x40) 22:58:48 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x8c, "343ea739df039afbe11b7ccacb690949522e715c06d0ec3cf8792476f21d5c00b35ebd8d076b50bd480f543e8977e967cc0400c103eb8094bae2f09377821bc052de5339c2e45405c5cf7dab5444f03aad6995ded6237da095d000c249d33408ddcd04576ce2367be0875e81ddcde0beed73c28914eeba93fb17894403120c7de14970d15c939a5b0fbb1650"}, &(0x7f0000000900)=0xb0) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a00), 0x10000, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000a40)={'filter\x00', 0x0, 0x0, 0x0, [0x800, 0x0, 0x1, 0x7ff0000000000, 0x5, 0x9]}, &(0x7f0000000ac0)=0x78) 22:58:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8894) 22:58:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8894) 22:58:48 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x8c, "343ea739df039afbe11b7ccacb690949522e715c06d0ec3cf8792476f21d5c00b35ebd8d076b50bd480f543e8977e967cc0400c103eb8094bae2f09377821bc052de5339c2e45405c5cf7dab5444f03aad6995ded6237da095d000c249d33408ddcd04576ce2367be0875e81ddcde0beed73c28914eeba93fb17894403120c7de14970d15c939a5b0fbb1650"}, &(0x7f0000000900)=0xb0) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a00), 0x10000, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) 22:58:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8894) 22:58:56 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x8c, "343ea739df039afbe11b7ccacb690949522e715c06d0ec3cf8792476f21d5c00b35ebd8d076b50bd480f543e8977e967cc0400c103eb8094bae2f09377821bc052de5339c2e45405c5cf7dab5444f03aad6995ded6237da095d000c249d33408ddcd04576ce2367be0875e81ddcde0beed73c28914eeba93fb17894403120c7de14970d15c939a5b0fbb1650"}, &(0x7f0000000900)=0xb0) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000a00), 0x10000, 0x0) 22:58:56 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000009c0)={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x7, 0x50fb, 0x20, 0x500, 0x6, 0x800022, r8}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x40) 22:58:56 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xc1, &(0x7f0000000b00)=@string={0xc1, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09b"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 22:58:56 executing program 1: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) 22:58:56 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x8c, "343ea739df039afbe11b7ccacb690949522e715c06d0ec3cf8792476f21d5c00b35ebd8d076b50bd480f543e8977e967cc0400c103eb8094bae2f09377821bc052de5339c2e45405c5cf7dab5444f03aad6995ded6237da095d000c249d33408ddcd04576ce2367be0875e81ddcde0beed73c28914eeba93fb17894403120c7de14970d15c939a5b0fbb1650"}, &(0x7f0000000900)=0xb0) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a00), 0x10000, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) 22:58:56 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x8c, "343ea739df039afbe11b7ccacb690949522e715c06d0ec3cf8792476f21d5c00b35ebd8d076b50bd480f543e8977e967cc0400c103eb8094bae2f09377821bc052de5339c2e45405c5cf7dab5444f03aad6995ded6237da095d000c249d33408ddcd04576ce2367be0875e81ddcde0beed73c28914eeba93fb17894403120c7de14970d15c939a5b0fbb1650"}, &(0x7f0000000900)=0xb0) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000a00), 0x10000, 0x0) 22:58:56 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x8c, "343ea739df039afbe11b7ccacb690949522e715c06d0ec3cf8792476f21d5c00b35ebd8d076b50bd480f543e8977e967cc0400c103eb8094bae2f09377821bc052de5339c2e45405c5cf7dab5444f03aad6995ded6237da095d000c249d33408ddcd04576ce2367be0875e81ddcde0beed73c28914eeba93fb17894403120c7de14970d15c939a5b0fbb1650"}, &(0x7f0000000900)=0xb0) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a00), 0x10000, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) [ 2234.359484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2234.379519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 22:58:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8894) 22:58:56 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x8c, "343ea739df039afbe11b7ccacb690949522e715c06d0ec3cf8792476f21d5c00b35ebd8d076b50bd480f543e8977e967cc0400c103eb8094bae2f09377821bc052de5339c2e45405c5cf7dab5444f03aad6995ded6237da095d000c249d33408ddcd04576ce2367be0875e81ddcde0beed73c28914eeba93fb17894403120c7de14970d15c939a5b0fbb1650"}, &(0x7f0000000900)=0xb0) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) 22:58:56 executing program 1: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) 22:58:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) 22:58:56 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x8c, "343ea739df039afbe11b7ccacb690949522e715c06d0ec3cf8792476f21d5c00b35ebd8d076b50bd480f543e8977e967cc0400c103eb8094bae2f09377821bc052de5339c2e45405c5cf7dab5444f03aad6995ded6237da095d000c249d33408ddcd04576ce2367be0875e81ddcde0beed73c28914eeba93fb17894403120c7de14970d15c939a5b0fbb1650"}, &(0x7f0000000900)=0xb0) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000a00), 0x10000, 0x0) 22:58:57 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x8c, "343ea739df039afbe11b7ccacb690949522e715c06d0ec3cf8792476f21d5c00b35ebd8d076b50bd480f543e8977e967cc0400c103eb8094bae2f09377821bc052de5339c2e45405c5cf7dab5444f03aad6995ded6237da095d000c249d33408ddcd04576ce2367be0875e81ddcde0beed73c28914eeba93fb17894403120c7de14970d15c939a5b0fbb1650"}, &(0x7f0000000900)=0xb0) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) 22:58:57 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x8c, "343ea739df039afbe11b7ccacb690949522e715c06d0ec3cf8792476f21d5c00b35ebd8d076b50bd480f543e8977e967cc0400c103eb8094bae2f09377821bc052de5339c2e45405c5cf7dab5444f03aad6995ded6237da095d000c249d33408ddcd04576ce2367be0875e81ddcde0beed73c28914eeba93fb17894403120c7de14970d15c939a5b0fbb1650"}, &(0x7f0000000900)=0xb0) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000a00), 0x10000, 0x0) 22:59:06 executing program 1: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x10) 22:59:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) 22:59:06 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x8c, "343ea739df039afbe11b7ccacb690949522e715c06d0ec3cf8792476f21d5c00b35ebd8d076b50bd480f543e8977e967cc0400c103eb8094bae2f09377821bc052de5339c2e45405c5cf7dab5444f03aad6995ded6237da095d000c249d33408ddcd04576ce2367be0875e81ddcde0beed73c28914eeba93fb17894403120c7de14970d15c939a5b0fbb1650"}, &(0x7f0000000900)=0xb0) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) 22:59:06 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x8c, "343ea739df039afbe11b7ccacb690949522e715c06d0ec3cf8792476f21d5c00b35ebd8d076b50bd480f543e8977e967cc0400c103eb8094bae2f09377821bc052de5339c2e45405c5cf7dab5444f03aad6995ded6237da095d000c249d33408ddcd04576ce2367be0875e81ddcde0beed73c28914eeba93fb17894403120c7de14970d15c939a5b0fbb1650"}, &(0x7f0000000900)=0xb0) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) 22:59:06 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x8c, "343ea739df039afbe11b7ccacb690949522e715c06d0ec3cf8792476f21d5c00b35ebd8d076b50bd480f543e8977e967cc0400c103eb8094bae2f09377821bc052de5339c2e45405c5cf7dab5444f03aad6995ded6237da095d000c249d33408ddcd04576ce2367be0875e81ddcde0beed73c28914eeba93fb17894403120c7de14970d15c939a5b0fbb1650"}, &(0x7f0000000900)=0xb0) 22:59:06 executing program 5: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) 22:59:06 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) 22:59:06 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xc1, &(0x7f0000000b00)=@string={0xc1, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09b"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 22:59:06 executing program 1: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) [ 2243.806907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2243.811708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 22:59:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) 22:59:06 executing program 1: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:06 executing program 5: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) 22:59:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8894) 22:59:06 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) 22:59:06 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x8c, "343ea739df039afbe11b7ccacb690949522e715c06d0ec3cf8792476f21d5c00b35ebd8d076b50bd480f543e8977e967cc0400c103eb8094bae2f09377821bc052de5339c2e45405c5cf7dab5444f03aad6995ded6237da095d000c249d33408ddcd04576ce2367be0875e81ddcde0beed73c28914eeba93fb17894403120c7de14970d15c939a5b0fbb1650"}, &(0x7f0000000900)=0xb0) 22:59:06 executing program 1: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:06 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:59:15 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) 22:59:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) 22:59:15 executing program 1: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:15 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xe1, &(0x7f0000000b00)=@string={0xe1, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee721"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 22:59:15 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) 22:59:15 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x8c, "343ea739df039afbe11b7ccacb690949522e715c06d0ec3cf8792476f21d5c00b35ebd8d076b50bd480f543e8977e967cc0400c103eb8094bae2f09377821bc052de5339c2e45405c5cf7dab5444f03aad6995ded6237da095d000c249d33408ddcd04576ce2367be0875e81ddcde0beed73c28914eeba93fb17894403120c7de14970d15c939a5b0fbb1650"}, &(0x7f0000000900)=0xb0) 22:59:15 executing program 5: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) 22:59:15 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 2253.072773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2253.080483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 22:59:15 executing program 1: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8894) 22:59:15 executing program 5: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x10) 22:59:15 executing program 1: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) 22:59:15 executing program 5: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:15 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) 22:59:15 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) 22:59:15 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) 22:59:15 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22:59:22 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) 22:59:22 executing program 1: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:22 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) 22:59:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8894) 22:59:22 executing program 5: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:22 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) 22:59:22 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) 22:59:22 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xe1, &(0x7f0000000b00)=@string={0xe1, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee721"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) [ 2260.526919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2260.543504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 22:59:23 executing program 5: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:23 executing program 1: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) 22:59:23 executing program 5: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:32 executing program 1: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8894) 22:59:32 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xe1, &(0x7f0000000b00)=@string={0xe1, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee721"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 22:59:32 executing program 5: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:32 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) 22:59:32 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) 22:59:32 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) 22:59:32 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) [ 2270.080213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 22:59:32 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) [ 2270.095961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 22:59:32 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) 22:59:32 executing program 1: r0 = memfd_secret(0x0) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:32 executing program 5: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:32 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) 22:59:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}}, 0x8894) 22:59:32 executing program 5: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:32 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) 22:59:32 executing program 5: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:32 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) 22:59:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14}, 0x14}}, 0x0) 22:59:41 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xf1, &(0x7f0000000b00)=@string={0xf1, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 22:59:41 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) 22:59:41 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) 22:59:41 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) 22:59:41 executing program 5: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:41 executing program 1: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:41 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) 22:59:41 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) 22:59:41 executing program 1: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) [ 2279.172825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2279.182121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 22:59:41 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) 22:59:41 executing program 5: r0 = memfd_secret(0x0) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:41 executing program 2: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:41 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) 22:59:41 executing program 1: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:41 executing program 2: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:41 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) memfd_secret(0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) 22:59:50 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) 22:59:50 executing program 5: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:50 executing program 1: memfd_secret(0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:50 executing program 2: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:50 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xf1, &(0x7f0000000b00)=@string={0xf1, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 22:59:50 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) 22:59:50 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) 22:59:50 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) 22:59:50 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) [ 2288.297726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2288.304980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 22:59:50 executing program 1: memfd_secret(0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:50 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, 0xffffffffffffffff, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) 22:59:50 executing program 2: openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) 22:59:50 executing program 5: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 22:59:50 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) 22:59:50 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) 22:59:50 executing program 1: memfd_secret(0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 23:00:00 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) 23:00:00 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, 0xffffffffffffffff, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) 23:00:00 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xf1, &(0x7f0000000b00)=@string={0xf1, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:00:00 executing program 5: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 23:00:00 executing program 1: r0 = memfd_secret(0x0) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) 23:00:00 executing program 2: openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) 23:00:00 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) 23:00:00 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) 23:00:00 executing program 1: r0 = memfd_secret(0x0) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) 23:00:00 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) [ 2297.623989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2297.633976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:00:00 executing program 5: memfd_secret(0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 23:00:00 executing program 2: openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) 23:00:00 executing program 1: r0 = memfd_secret(0x0) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) 23:00:00 executing program 7: io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, 0xffffffffffffffff, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) 23:00:00 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) 23:00:00 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) 23:00:00 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) 23:00:00 executing program 1: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) 23:00:09 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) 23:00:09 executing program 5: memfd_secret(0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 23:00:09 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xf9, &(0x7f0000000b00)=@string={0xf9, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:00:09 executing program 7: io_cancel(0x0, 0x0, &(0x7f00000009c0)) 23:00:09 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) 23:00:09 executing program 2: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 23:00:09 executing program 1: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) 23:00:09 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) [ 2307.106041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2307.111621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:00:09 executing program 7: io_cancel(0x0, 0x0, &(0x7f00000009c0)) 23:00:09 executing program 1: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) 23:00:09 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) 23:00:09 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) 23:00:09 executing program 2: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 23:00:09 executing program 5: memfd_secret(0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) 23:00:18 executing program 7: io_cancel(0x0, 0x0, &(0x7f00000009c0)) 23:00:18 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xf9, &(0x7f0000000b00)=@string={0xf9, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:00:18 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) 23:00:18 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) r1 = memfd_secret(0x80000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) 23:00:18 executing program 1: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) 23:00:18 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) 23:00:18 executing program 5: r0 = memfd_secret(0x0) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) 23:00:18 executing program 2: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) [ 2316.115958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2316.124954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:00:18 executing program 2: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) 23:00:18 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) 23:00:18 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = memfd_secret(0x80000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) 23:00:18 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) 23:00:18 executing program 1: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, 0xffffffffffffffff, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) 23:00:18 executing program 5: r0 = memfd_secret(0x0) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) 23:00:18 executing program 7: io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0xff, 0xffffffffffffffff, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) 23:00:18 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) 23:00:27 executing program 5: r0 = memfd_secret(0x0) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) 23:00:27 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xf9, &(0x7f0000000b00)=@string={0xf9, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:00:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000600)) 23:00:27 executing program 7: io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) 23:00:27 executing program 2: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) 23:00:27 executing program 1: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, 0xffffffffffffffff, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) 23:00:27 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) memfd_secret(0x80000) 23:00:27 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = memfd_secret(0x80000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) [ 2325.317704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2325.324653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:00:27 executing program 1: io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, 0xffffffffffffffff, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) 23:00:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 23:00:27 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) 23:00:27 executing program 7: io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) 23:00:27 executing program 5: io_cancel(0x0, 0x0, &(0x7f00000009c0)) 23:00:27 executing program 2: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 23:00:27 executing program 4: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) r0 = memfd_secret(0x80000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) 23:00:27 executing program 1: io_cancel(0x0, 0x0, &(0x7f00000009c0)) 23:00:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 23:00:37 executing program 7: io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000009c0)) 23:00:37 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xfd, &(0x7f0000000b00)=@string={0xfd, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4b84877cd"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:00:37 executing program 5: io_cancel(0x0, 0x0, &(0x7f00000009c0)) 23:00:37 executing program 1: io_cancel(0x0, 0x0, &(0x7f00000009c0)) 23:00:37 executing program 4: r0 = memfd_secret(0x80000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) 23:00:37 executing program 2: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) 23:00:37 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 23:00:37 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) [ 2335.224116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2335.248199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:00:37 executing program 5: io_cancel(0x0, 0x0, &(0x7f00000009c0)) 23:00:37 executing program 1: io_cancel(0x0, 0x0, &(0x7f00000009c0)) 23:00:37 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) 23:00:37 executing program 4: r0 = memfd_secret(0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) 23:00:37 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) 23:00:37 executing program 7: io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000009c0)) 23:00:37 executing program 3: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xf9, &(0x7f0000000b00)=@string={0xf9, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:00:37 executing program 5: io_cancel(0x0, 0x0, 0x0) [ 2335.462309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2335.466332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:00:47 executing program 1: io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0xff, 0xffffffffffffffff, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) 23:00:47 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xfd, &(0x7f0000000b00)=@string={0xfd, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:00:47 executing program 0: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) 23:00:47 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) 23:00:47 executing program 4: memfd_secret(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) 23:00:47 executing program 7: io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 23:00:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 23:00:47 executing program 3: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xfd, &(0x7f0000000b00)=@string={0xfd, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) [ 2344.812840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2344.817049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:00:47 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) 23:00:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) [ 2344.864286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 23:00:47 executing program 1: io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) [ 2344.871433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:00:47 executing program 0: recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) 23:00:47 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 23:00:47 executing program 4: memfd_secret(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) 23:00:47 executing program 1: io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x63aacd04, 0x0, 0x1}, &(0x7f00000009c0)) 23:00:47 executing program 2: memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) 23:00:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 23:00:55 executing program 0: recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) 23:00:55 executing program 1: io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000009c0)) 23:00:55 executing program 3: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0xff, r0, &(0x7f0000000940)="0864c7dbb648133e1479fb4f2f03fdc64dc37cee9e407e78174964bec96b9b5ccb207eba846f221b5b1472d1f38937206006cd2f738d38fdb5341cb29677783c", 0x40, 0x63aacd04, 0x0, 0x1, r1}, &(0x7f00000009c0)) 23:00:55 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xfd, &(0x7f0000000b00)=@string={0xfd, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4b84877cd"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:00:55 executing program 4: memfd_secret(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) 23:00:55 executing program 7: ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x9}, {0xa, 0x4e20, 0x1b2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x31}, 0x5, [0x2, 0x9, 0xe86, 0x8, 0x3e000000, 0xffffffff, 0x9cd, 0x9]}, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/60, 0x3c, 0x40010000, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) r1 = memfd_secret(0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x3, 0x40, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x20, 0x3, 0x7fff}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', r2, 0x2f, 0x1, 0x1, 0xf7, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x8000, 0x6, 0x7}}) keyctl$join(0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000440)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x10001, 0x400, 0x8, 0x0, 0x200]}, &(0x7f00000004c0)=0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl0\x00', r3, 0x29, 0x96, 0x5, 0x800, 0x20, @private1, @mcast2, 0x7800, 0x7800, 0x3, 0x7}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0x8c, "343ea739df039afbe11b7ccacb690949522e715c06d0ec3cf8792476f21d5c00b35ebd8d076b50bd480f543e8977e967cc0400c103eb8094bae2f09377821bc052de5339c2e45405c5cf7dab5444f03aad6995ded6237da095d000c249d33408ddcd04576ce2367be0875e81ddcde0beed73c28914eeba93fb17894403120c7de14970d15c939a5b0fbb1650"}, &(0x7f0000000900)=0xb0) 23:00:55 executing program 2: memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) 23:00:55 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 23:00:55 executing program 0: recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x7, @loopback, 0x8d}, 0x1c) [ 2352.876679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2352.884343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:00:55 executing program 4: r0 = memfd_secret(0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000340)) 23:00:55 executing program 1: io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000009c0)) 23:00:55 executing program 2: memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) 23:01:03 executing program 0: recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 23:01:03 executing program 1: io_cancel(0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 23:01:03 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xff, &(0x7f0000000b00)=@string={0xff, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4b84877cdd6e5"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:01:03 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000009c0)={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x7, 0x50fb, 0x20, 0x500, 0x6, 0x800022, r8}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x40) 23:01:03 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000009c0)={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x7, 0x50fb, 0x20, 0x500, 0x6, 0x800022, r8}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x40) 23:01:03 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 23:01:03 executing program 4: r0 = memfd_secret(0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 23:01:03 executing program 2: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) [ 2361.371068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2361.379801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:01:03 executing program 5: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 23:01:03 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000009c0)={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x7, 0x50fb, 0x20, 0x500, 0x6, 0x800022, r8}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x40) 23:01:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000009c0)={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x7, 0x50fb, 0x20, 0x500, 0x6, 0x800022, r8}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x40) 23:01:03 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000009c0)={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x7, 0x50fb, 0x20, 0x500, 0x6, 0x800022, r8}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x40) 23:01:04 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}}, 0x4) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r1 = syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) r2 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x8, 0x200) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000800)={{0x1, 0x3, 0x4, 0x2, 0x2, 0x2}, 0xb2, [0x0, 0xe6, 0xffffffc0, 0x6164, 0x0, 0x4, 0x8, 0x8001, 0xebf8, 0x8, 0x4, 0xffffffff, 0x0, 0x1, 0x3, 0x3, 0x1000, 0x5, 0x0, 0x2000, 0x44, 0x1dac, 0x7, 0x7, 0x1, 0xc30, 0x1f, 0x8b16, 0x4, 0x4, 0x1fd, 0x1, 0x3, 0xd0, 0x3, 0x3, 0x2, 0x4, 0x3, 0x1000, 0x6, 0x2, 0x9f8, 0x9, 0x81, 0x43e, 0x3, 0x81, 0x2, 0x8, 0x1, 0x8000, 0x2, 0x6, 0x3, 0x4, 0x9, 0xfaac, 0x1, 0x9, 0x0, 0x3, 0x800, 0x7, 0x6, 0x2, 0x9, 0x7, 0x6, 0x8000, 0x36, 0x5, 0x2, 0x4, 0x6, 0x8001, 0x1, 0x98a0, 0x8d80, 0x1f, 0x3f, 0x2, 0x4, 0x3, 0xffff, 0x5, 0x81, 0x8, 0x7, 0x0, 0xff, 0x80, 0x1, 0x8f3, 0x2, 0xe2e0, 0x3, 0x9, 0xf88, 0x0, 0xc850, 0x2, 0xb6e, 0x1, 0x8, 0x547e, 0x6ac236db, 0x1, 0x2c8d, 0x1, 0x2, 0x4, 0x8, 0x6, 0x6, 0x100, 0x0, 0xfffffffe, 0xa1, 0x6, 0x10000, 0xa302, 0x80000001, 0x7, 0x0, 0x0, 0x6a, 0x6, 0x7, 0x3, 0x9, 0x0, 0x8, 0x2, 0xffff80bd, 0x401, 0x3f, 0x7ff, 0x1bd8, 0x1, 0x6, 0xb1, 0x3, 0x3, 0x200, 0x2, 0x1ff, 0xe933, 0x4, 0x7fffffff, 0x3, 0x0, 0x7fff, 0x40, 0x5, 0x5, 0x2, 0x7ff, 0x80, 0x7, 0x3aa1, 0x2, 0x8, 0x8, 0x1000, 0x5, 0x3, 0x0, 0x8f8, 0x80, 0x9bf9, 0x71, 0x6, 0x21, 0xb07, 0x0, 0x3f, 0x81, 0x8001, 0xffffffff, 0xfff, 0xba16, 0x8, 0x1f6, 0x9, 0xa, 0x0, 0x3, 0x4, 0x2, 0xffff0001, 0xffff, 0x3, 0x0, 0x5, 0x14, 0xc, 0x66c6, 0x7fffffff, 0xffffff78, 0x0, 0x9, 0x9, 0x40, 0x4, 0x7533, 0x80000000, 0x2, 0xa32, 0x5, 0x40, 0x81, 0x7fff, 0x2, 0xfffffffc, 0x8, 0x9, 0x7, 0x5, 0x8d, 0x80000000, 0xda, 0x80000001, 0x2, 0x2, 0x80, 0x6, 0xffffff00, 0x1, 0x7fff, 0x4, 0x4, 0x2, 0x10001, 0x0, 0x7fff, 0x1000, 0x1, 0x81, 0x7ff, 0xa88fe5b, 0x5, 0xffffff80, 0x400, 0x6, 0x6, 0x2, 0x8, 0xbfa0, 0x1000, 0x9, 0xffff, 0x8, 0x0, 0x8, 0x6, 0x3, 0x4, 0x1, 0x1f, 0x10001, 0x8000, 0xfffffb70, 0x1, 0x2, 0x7, 0x3, 0x2, 0x80000000, 0x4, 0x29f0, 0x1ff, 0x1ff, 0x46af0591, 0x68a954a, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x3, 0xffffda6d, 0x3, 0x7, 0x3, 0x3, 0x8c7d, 0x40, 0xea, 0x8, 0x9, 0x8, 0x2, 0x5, 0x2, 0x1, 0xffffffff, 0x10000, 0x0, 0x80, 0x7, 0x50, 0xfffffffb, 0x3, 0x1, 0x3f, 0x4, 0x1, 0x8000, 0xffff6417, 0x80, 0x1, 0x9bc, 0x3, 0x0, 0x20, 0x4, 0x8000, 0xf3, 0x10000, 0xa24c, 0x1, 0x20, 0x1ff, 0x40, 0x1, 0x0, 0x4, 0xd90, 0xac, 0x4, 0x5b, 0x7fffffff, 0x400, 0x101, 0x8, 0x101, 0x472, 0x6, 0x1, 0x1, 0x3, 0x0, 0x3, 0x40, 0x3, 0x1, 0x200, 0x3, 0x5, 0x1, 0x4, 0x395a, 0xd1b9, 0x1, 0x5, 0x3ff, 0x5, 0x2, 0x4, 0x4, 0x7, 0x3, 0x40, 0x3ff, 0x401, 0x1, 0x0, 0x9, 0x7fff, 0x0, 0x0, 0x80000000, 0x8, 0x80, 0x2, 0xfffffff8, 0x9, 0xffffff01, 0x4, 0x7, 0x8, 0x0, 0x20, 0x5e21, 0xffffffff, 0x4, 0x1f, 0x100, 0x248, 0x1ff, 0x8, 0x6fc, 0x8, 0x8, 0x3f, 0xff, 0x5, 0xffff, 0x7fff, 0x7, 0x9, 0x14, 0x7fffffff, 0xffffffff, 0x0, 0x81, 0x2, 0x7f, 0x1, 0xfff, 0x4, 0x7, 0x4, 0x2, 0x5, 0x10000, 0x6b18d17f, 0x6a3, 0xc48, 0x4, 0x2, 0x0, 0x4, 0x5, 0x1f, 0x6, 0x1ff, 0x12, 0x2, 0x5, 0x1f, 0x3d, 0xffff7fff, 0x7, 0x1, 0x1ff, 0x0, 0x6, 0x5, 0x8000, 0x5, 0xfffffffa, 0x6, 0xc17, 0x7ff, 0x80000000, 0x0, 0xe3f, 0x9, 0x62, 0x3, 0x4, 0x3ff, 0x2a19, 0x1, 0x5, 0x8000, 0x78, 0x226, 0x8, 0x1, 0xfffffffa, 0x400, 0x7, 0x3, 0x8, 0x1, 0x8, 0xa3f, 0x0, 0x4fc, 0x101, 0x6, 0x1, 0x6, 0x2, 0x1, 0x7ff, 0x8, 0x80000000, 0x1, 0x1, 0x1, 0x5, 0x4, 0x5, 0x8, 0x7, 0xfff, 0xde94, 0xf6c, 0x347, 0x9, 0x1, 0x3, 0x10000, 0x9, 0x8000, 0x8, 0x3, 0xfffffbff, 0x80000000, 0x1, 0x8001, 0x5, 0x1, 0x9, 0x9, 0x7, 0x2, 0x2, 0x6, 0x5, 0x3f, 0x3, 0xfff, 0x9, 0x0, 0xc195, 0x3, 0x5, 0x1, 0x500e, 0x4, 0x3, 0xff, 0xffff, 0x7, 0x1, 0x4, 0x8, 0x100, 0x65, 0x3, 0x7ff, 0x64e, 0x40, 0x0, 0x10001, 0x7fffffff, 0x7, 0xda3, 0x4, 0x376d7044, 0xf2a2, 0x1000, 0xff, 0x1, 0x8, 0x6, 0x7f, 0x8, 0x3f, 0x0, 0x57, 0x1, 0x7, 0x4, 0x7, 0x7, 0xfff, 0x8, 0x5bcf, 0x3ff, 0x300, 0x40000000, 0x1522, 0x100, 0x9, 0xfffffffb, 0x3ff, 0x30b, 0x6, 0xfff, 0x2, 0x39fa, 0x6, 0x3, 0x8, 0x7, 0x7, 0x5, 0x6, 0x80, 0x3, 0x1ff, 0x6, 0x7, 0xffffffff, 0x4, 0x4, 0xffffff80, 0x3, 0x9, 0xff, 0x6a, 0x8, 0x29, 0x1, 0x6, 0x2, 0x9, 0x6, 0x7, 0xffff, 0x80, 0xfff, 0xffe00000, 0x80000001, 0x10001, 0x1ff, 0xfff, 0xfff, 0x0, 0x7fffffff, 0x800, 0x9, 0x1, 0xfffffffb, 0x80000000, 0x2, 0x646, 0x3, 0x0, 0x3, 0x7, 0x6, 0x1, 0x1, 0x54aa, 0xfffffff7, 0x6, 0x80000001, 0x1, 0x0, 0x1, 0x9, 0x5849, 0x1f, 0x97af, 0x0, 0x60, 0x4, 0x8, 0x4, 0x9, 0x6, 0xfffffa03, 0x800, 0x5fbeaa1a, 0x80000001, 0x0, 0xfffffffd, 0x4, 0x101, 0xdd3f, 0x6, 0x6, 0x483, 0x6, 0x9, 0x9, 0xfff, 0x1, 0x0, 0x6, 0x7, 0x2, 0x4, 0x0, 0x20, 0x60, 0xaaa, 0x9, 0x40, 0x10000, 0x0, 0xf0000000, 0x7fffffff, 0x5, 0x101, 0x6, 0x7ff, 0x101, 0x9798, 0x2, 0x7fff, 0x10001, 0x8001, 0x4, 0x7, 0x18, 0x8, 0xd95a, 0x4, 0x7, 0x8, 0xb282, 0x1, 0x0, 0x6, 0x4, 0xb3f, 0x380, 0x8000, 0x3, 0x0, 0xb03, 0x0, 0x80000000, 0x8001, 0x2, 0x0, 0x7f, 0x6, 0x4, 0x2, 0x5, 0xc7, 0x1f, 0x0, 0x81, 0xffffffff, 0x80000000, 0x9, 0xffffffff, 0x80000000, 0x7fffffff, 0x4, 0x20, 0xcf0, 0xe80c, 0x8, 0x6, 0x1000, 0x78, 0x4, 0x5, 0x6, 0xc67, 0x9, 0x81, 0x5, 0x5, 0xf4, 0x977b, 0x3ff, 0x9, 0x8000, 0xff, 0x5, 0xded5, 0x3, 0x800, 0x3, 0x1, 0x4, 0x4, 0xc9c, 0x7, 0x7fd, 0xa4a1, 0x3, 0x6, 0x2, 0x5c, 0x7, 0x2, 0x2, 0x10000, 0x400, 0x800, 0x8, 0x0, 0x1, 0x80000, 0x7, 0x478, 0x100, 0x1f, 0x8, 0x6, 0xff, 0x1, 0xffff, 0x1, 0x7, 0x403a, 0x3ff, 0xffff, 0x81, 0xe0, 0x8, 0x1000, 0x8, 0x831f, 0x9046, 0x6, 0x40, 0x5cfc, 0xfffffff8, 0x9, 0x9dc, 0x3, 0x7fffffff, 0x80, 0x7, 0x1, 0x4486, 0x1, 0x5, 0x8, 0x1ff, 0x1, 0x9, 0x8, 0x2, 0x7ff, 0x26, 0x0, 0x4ff5, 0x40, 0x7, 0x8, 0x8, 0x1ff, 0x7, 0x4, 0x1f, 0x1000, 0x590, 0x3, 0x81, 0xffff, 0x4, 0x2, 0xc9d1, 0x0, 0x2, 0x7fffffff, 0x8, 0x6, 0x6, 0x5, 0x8bdd, 0x6, 0x101, 0x6c325de4, 0x4, 0x7f, 0xfffffff7, 0x4, 0x200, 0x40, 0x3f, 0x6, 0x101, 0x2, 0x401, 0xfc0000, 0x3, 0x74, 0x7, 0xffff845a, 0x38000000, 0x7, 0xffffff92, 0x4, 0x0, 0x2, 0x400bcb26, 0x100, 0x1, 0x3, 0x1, 0x5f63, 0x1, 0x2, 0x80000001, 0x6, 0xff, 0x1000, 0x40, 0x3b, 0x9, 0x8, 0x87f4, 0x3, 0xd34, 0x20, 0xfffffffc, 0x1f, 0x3ff, 0x0, 0x7, 0x3, 0x6, 0xbfd, 0xfffffe01, 0x49536275, 0x7fffffff, 0x4, 0xb9e, 0x1, 0x3, 0x1, 0x89a, 0xfffffffd, 0x13, 0x1, 0x9958, 0x2, 0x5, 0x81, 0x5, 0x3, 0x40, 0x41, 0x2, 0x1, 0x9, 0x1, 0x5f, 0x23, 0x20, 0x8, 0x15d, 0xff, 0x6, 0x7f, 0x7, 0x8, 0x8000, 0x80000001, 0x0, 0x2, 0x3f, 0x1369, 0x1, 0x2, 0x9, 0x401, 0x7f, 0x6, 0x8, 0x1, 0xa92, 0x10a, 0x1, 0x0, 0x14000, 0x2, 0x1, 0x10000, 0x0, 0xfffffff7, 0x2, 0x5, 0xdbcc, 0x9, 0x5, 0x4, 0x2, 0x4, 0x2, 0x2, 0xfffffffc, 0x20, 0x6, 0x1, 0x2, 0x5, 0x7fffffff, 0x5, 0x4dba, 0x2, 0x4, 0x3, 0x7, 0xc1, 0x8, 0x97, 0xfffffff7, 0x7fffffff, 0x0, 0x100, 0x5, 0x8, 0x4, 0x2, 0x1000, 0x3, 0x100, 0xef7d, 0x9, 0x9, 0x8000, 0x400, 0x7f, 0xffffffff, 0xe4, 0x3, 0x200, 0x80, 0x7ff, 0x4, 0x32, 0x8, 0x5, 0x8001, 0xffff8000, 0x400, 0x0, 0x8, 0x83, 0x8, 0x3ff, 0x8000, 0x1, 0xffff, 0x6, 0x52, 0x658]}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000001840)=0x3) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x804) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x24, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x24, r0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000001bc0)={0x1, 0x1, 0x20, 0x7, 0x7f, 0x1}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 23:01:04 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000009c0)={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x7, 0x50fb, 0x20, 0x500, 0x6, 0x800022, r8}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x40) 23:01:04 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 23:01:04 executing program 7: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}}, 0x4) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r1 = syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) r2 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x8, 0x200) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000800)={{0x1, 0x3, 0x4, 0x2, 0x2, 0x2}, 0xb2, [0x0, 0xe6, 0xffffffc0, 0x6164, 0x0, 0x4, 0x8, 0x8001, 0xebf8, 0x8, 0x4, 0xffffffff, 0x0, 0x1, 0x3, 0x3, 0x1000, 0x5, 0x0, 0x2000, 0x44, 0x1dac, 0x7, 0x7, 0x1, 0xc30, 0x1f, 0x8b16, 0x4, 0x4, 0x1fd, 0x1, 0x3, 0xd0, 0x3, 0x3, 0x2, 0x4, 0x3, 0x1000, 0x6, 0x2, 0x9f8, 0x9, 0x81, 0x43e, 0x3, 0x81, 0x2, 0x8, 0x1, 0x8000, 0x2, 0x6, 0x3, 0x4, 0x9, 0xfaac, 0x1, 0x9, 0x0, 0x3, 0x800, 0x7, 0x6, 0x2, 0x9, 0x7, 0x6, 0x8000, 0x36, 0x5, 0x2, 0x4, 0x6, 0x8001, 0x1, 0x98a0, 0x8d80, 0x1f, 0x3f, 0x2, 0x4, 0x3, 0xffff, 0x5, 0x81, 0x8, 0x7, 0x0, 0xff, 0x80, 0x1, 0x8f3, 0x2, 0xe2e0, 0x3, 0x9, 0xf88, 0x0, 0xc850, 0x2, 0xb6e, 0x1, 0x8, 0x547e, 0x6ac236db, 0x1, 0x2c8d, 0x1, 0x2, 0x4, 0x8, 0x6, 0x6, 0x100, 0x0, 0xfffffffe, 0xa1, 0x6, 0x10000, 0xa302, 0x80000001, 0x7, 0x0, 0x0, 0x6a, 0x6, 0x7, 0x3, 0x9, 0x0, 0x8, 0x2, 0xffff80bd, 0x401, 0x3f, 0x7ff, 0x1bd8, 0x1, 0x6, 0xb1, 0x3, 0x3, 0x200, 0x2, 0x1ff, 0xe933, 0x4, 0x7fffffff, 0x3, 0x0, 0x7fff, 0x40, 0x5, 0x5, 0x2, 0x7ff, 0x80, 0x7, 0x3aa1, 0x2, 0x8, 0x8, 0x1000, 0x5, 0x3, 0x0, 0x8f8, 0x80, 0x9bf9, 0x71, 0x6, 0x21, 0xb07, 0x0, 0x3f, 0x81, 0x8001, 0xffffffff, 0xfff, 0xba16, 0x8, 0x1f6, 0x9, 0xa, 0x0, 0x3, 0x4, 0x2, 0xffff0001, 0xffff, 0x3, 0x0, 0x5, 0x14, 0xc, 0x66c6, 0x7fffffff, 0xffffff78, 0x0, 0x9, 0x9, 0x40, 0x4, 0x7533, 0x80000000, 0x2, 0xa32, 0x5, 0x40, 0x81, 0x7fff, 0x2, 0xfffffffc, 0x8, 0x9, 0x7, 0x5, 0x8d, 0x80000000, 0xda, 0x80000001, 0x2, 0x2, 0x80, 0x6, 0xffffff00, 0x1, 0x7fff, 0x4, 0x4, 0x2, 0x10001, 0x0, 0x7fff, 0x1000, 0x1, 0x81, 0x7ff, 0xa88fe5b, 0x5, 0xffffff80, 0x400, 0x6, 0x6, 0x2, 0x8, 0xbfa0, 0x1000, 0x9, 0xffff, 0x8, 0x0, 0x8, 0x6, 0x3, 0x4, 0x1, 0x1f, 0x10001, 0x8000, 0xfffffb70, 0x1, 0x2, 0x7, 0x3, 0x2, 0x80000000, 0x4, 0x29f0, 0x1ff, 0x1ff, 0x46af0591, 0x68a954a, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x3, 0xffffda6d, 0x3, 0x7, 0x3, 0x3, 0x8c7d, 0x40, 0xea, 0x8, 0x9, 0x8, 0x2, 0x5, 0x2, 0x1, 0xffffffff, 0x10000, 0x0, 0x80, 0x7, 0x50, 0xfffffffb, 0x3, 0x1, 0x3f, 0x4, 0x1, 0x8000, 0xffff6417, 0x80, 0x1, 0x9bc, 0x3, 0x0, 0x20, 0x4, 0x8000, 0xf3, 0x10000, 0xa24c, 0x1, 0x20, 0x1ff, 0x40, 0x1, 0x0, 0x4, 0xd90, 0xac, 0x4, 0x5b, 0x7fffffff, 0x400, 0x101, 0x8, 0x101, 0x472, 0x6, 0x1, 0x1, 0x3, 0x0, 0x3, 0x40, 0x3, 0x1, 0x200, 0x3, 0x5, 0x1, 0x4, 0x395a, 0xd1b9, 0x1, 0x5, 0x3ff, 0x5, 0x2, 0x4, 0x4, 0x7, 0x3, 0x40, 0x3ff, 0x401, 0x1, 0x0, 0x9, 0x7fff, 0x0, 0x0, 0x80000000, 0x8, 0x80, 0x2, 0xfffffff8, 0x9, 0xffffff01, 0x4, 0x7, 0x8, 0x0, 0x20, 0x5e21, 0xffffffff, 0x4, 0x1f, 0x100, 0x248, 0x1ff, 0x8, 0x6fc, 0x8, 0x8, 0x3f, 0xff, 0x5, 0xffff, 0x7fff, 0x7, 0x9, 0x14, 0x7fffffff, 0xffffffff, 0x0, 0x81, 0x2, 0x7f, 0x1, 0xfff, 0x4, 0x7, 0x4, 0x2, 0x5, 0x10000, 0x6b18d17f, 0x6a3, 0xc48, 0x4, 0x2, 0x0, 0x4, 0x5, 0x1f, 0x6, 0x1ff, 0x12, 0x2, 0x5, 0x1f, 0x3d, 0xffff7fff, 0x7, 0x1, 0x1ff, 0x0, 0x6, 0x5, 0x8000, 0x5, 0xfffffffa, 0x6, 0xc17, 0x7ff, 0x80000000, 0x0, 0xe3f, 0x9, 0x62, 0x3, 0x4, 0x3ff, 0x2a19, 0x1, 0x5, 0x8000, 0x78, 0x226, 0x8, 0x1, 0xfffffffa, 0x400, 0x7, 0x3, 0x8, 0x1, 0x8, 0xa3f, 0x0, 0x4fc, 0x101, 0x6, 0x1, 0x6, 0x2, 0x1, 0x7ff, 0x8, 0x80000000, 0x1, 0x1, 0x1, 0x5, 0x4, 0x5, 0x8, 0x7, 0xfff, 0xde94, 0xf6c, 0x347, 0x9, 0x1, 0x3, 0x10000, 0x9, 0x8000, 0x8, 0x3, 0xfffffbff, 0x80000000, 0x1, 0x8001, 0x5, 0x1, 0x9, 0x9, 0x7, 0x2, 0x2, 0x6, 0x5, 0x3f, 0x3, 0xfff, 0x9, 0x0, 0xc195, 0x3, 0x5, 0x1, 0x500e, 0x4, 0x3, 0xff, 0xffff, 0x7, 0x1, 0x4, 0x8, 0x100, 0x65, 0x3, 0x7ff, 0x64e, 0x40, 0x0, 0x10001, 0x7fffffff, 0x7, 0xda3, 0x4, 0x376d7044, 0xf2a2, 0x1000, 0xff, 0x1, 0x8, 0x6, 0x7f, 0x8, 0x3f, 0x0, 0x57, 0x1, 0x7, 0x4, 0x7, 0x7, 0xfff, 0x8, 0x5bcf, 0x3ff, 0x300, 0x40000000, 0x1522, 0x100, 0x9, 0xfffffffb, 0x3ff, 0x30b, 0x6, 0xfff, 0x2, 0x39fa, 0x6, 0x3, 0x8, 0x7, 0x7, 0x5, 0x6, 0x80, 0x3, 0x1ff, 0x6, 0x7, 0xffffffff, 0x4, 0x4, 0xffffff80, 0x3, 0x9, 0xff, 0x6a, 0x8, 0x29, 0x1, 0x6, 0x2, 0x9, 0x6, 0x7, 0xffff, 0x80, 0xfff, 0xffe00000, 0x80000001, 0x10001, 0x1ff, 0xfff, 0xfff, 0x0, 0x7fffffff, 0x800, 0x9, 0x1, 0xfffffffb, 0x80000000, 0x2, 0x646, 0x3, 0x0, 0x3, 0x7, 0x6, 0x1, 0x1, 0x54aa, 0xfffffff7, 0x6, 0x80000001, 0x1, 0x0, 0x1, 0x9, 0x5849, 0x1f, 0x97af, 0x0, 0x60, 0x4, 0x8, 0x4, 0x9, 0x6, 0xfffffa03, 0x800, 0x5fbeaa1a, 0x80000001, 0x0, 0xfffffffd, 0x4, 0x101, 0xdd3f, 0x6, 0x6, 0x483, 0x6, 0x9, 0x9, 0xfff, 0x1, 0x0, 0x6, 0x7, 0x2, 0x4, 0x0, 0x20, 0x60, 0xaaa, 0x9, 0x40, 0x10000, 0x0, 0xf0000000, 0x7fffffff, 0x5, 0x101, 0x6, 0x7ff, 0x101, 0x9798, 0x2, 0x7fff, 0x10001, 0x8001, 0x4, 0x7, 0x18, 0x8, 0xd95a, 0x4, 0x7, 0x8, 0xb282, 0x1, 0x0, 0x6, 0x4, 0xb3f, 0x380, 0x8000, 0x3, 0x0, 0xb03, 0x0, 0x80000000, 0x8001, 0x2, 0x0, 0x7f, 0x6, 0x4, 0x2, 0x5, 0xc7, 0x1f, 0x0, 0x81, 0xffffffff, 0x80000000, 0x9, 0xffffffff, 0x80000000, 0x7fffffff, 0x4, 0x20, 0xcf0, 0xe80c, 0x8, 0x6, 0x1000, 0x78, 0x4, 0x5, 0x6, 0xc67, 0x9, 0x81, 0x5, 0x5, 0xf4, 0x977b, 0x3ff, 0x9, 0x8000, 0xff, 0x5, 0xded5, 0x3, 0x800, 0x3, 0x1, 0x4, 0x4, 0xc9c, 0x7, 0x7fd, 0xa4a1, 0x3, 0x6, 0x2, 0x5c, 0x7, 0x2, 0x2, 0x10000, 0x400, 0x800, 0x8, 0x0, 0x1, 0x80000, 0x7, 0x478, 0x100, 0x1f, 0x8, 0x6, 0xff, 0x1, 0xffff, 0x1, 0x7, 0x403a, 0x3ff, 0xffff, 0x81, 0xe0, 0x8, 0x1000, 0x8, 0x831f, 0x9046, 0x6, 0x40, 0x5cfc, 0xfffffff8, 0x9, 0x9dc, 0x3, 0x7fffffff, 0x80, 0x7, 0x1, 0x4486, 0x1, 0x5, 0x8, 0x1ff, 0x1, 0x9, 0x8, 0x2, 0x7ff, 0x26, 0x0, 0x4ff5, 0x40, 0x7, 0x8, 0x8, 0x1ff, 0x7, 0x4, 0x1f, 0x1000, 0x590, 0x3, 0x81, 0xffff, 0x4, 0x2, 0xc9d1, 0x0, 0x2, 0x7fffffff, 0x8, 0x6, 0x6, 0x5, 0x8bdd, 0x6, 0x101, 0x6c325de4, 0x4, 0x7f, 0xfffffff7, 0x4, 0x200, 0x40, 0x3f, 0x6, 0x101, 0x2, 0x401, 0xfc0000, 0x3, 0x74, 0x7, 0xffff845a, 0x38000000, 0x7, 0xffffff92, 0x4, 0x0, 0x2, 0x400bcb26, 0x100, 0x1, 0x3, 0x1, 0x5f63, 0x1, 0x2, 0x80000001, 0x6, 0xff, 0x1000, 0x40, 0x3b, 0x9, 0x8, 0x87f4, 0x3, 0xd34, 0x20, 0xfffffffc, 0x1f, 0x3ff, 0x0, 0x7, 0x3, 0x6, 0xbfd, 0xfffffe01, 0x49536275, 0x7fffffff, 0x4, 0xb9e, 0x1, 0x3, 0x1, 0x89a, 0xfffffffd, 0x13, 0x1, 0x9958, 0x2, 0x5, 0x81, 0x5, 0x3, 0x40, 0x41, 0x2, 0x1, 0x9, 0x1, 0x5f, 0x23, 0x20, 0x8, 0x15d, 0xff, 0x6, 0x7f, 0x7, 0x8, 0x8000, 0x80000001, 0x0, 0x2, 0x3f, 0x1369, 0x1, 0x2, 0x9, 0x401, 0x7f, 0x6, 0x8, 0x1, 0xa92, 0x10a, 0x1, 0x0, 0x14000, 0x2, 0x1, 0x10000, 0x0, 0xfffffff7, 0x2, 0x5, 0xdbcc, 0x9, 0x5, 0x4, 0x2, 0x4, 0x2, 0x2, 0xfffffffc, 0x20, 0x6, 0x1, 0x2, 0x5, 0x7fffffff, 0x5, 0x4dba, 0x2, 0x4, 0x3, 0x7, 0xc1, 0x8, 0x97, 0xfffffff7, 0x7fffffff, 0x0, 0x100, 0x5, 0x8, 0x4, 0x2, 0x1000, 0x3, 0x100, 0xef7d, 0x9, 0x9, 0x8000, 0x400, 0x7f, 0xffffffff, 0xe4, 0x3, 0x200, 0x80, 0x7ff, 0x4, 0x32, 0x8, 0x5, 0x8001, 0xffff8000, 0x400, 0x0, 0x8, 0x83, 0x8, 0x3ff, 0x8000, 0x1, 0xffff, 0x6, 0x52, 0x658]}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000001840)=0x3) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x804) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x24, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x24, r0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000001bc0)={0x1, 0x1, 0x20, 0x7, 0x7f, 0x1}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 23:01:12 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x4090) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f00000007c0)={{0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, {0xa, 0x4e21, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}, 0x7, [0x5, 0x7, 0x2, 0xff, 0x50e5, 0x80000000, 0x6, 0x7373]}, 0x5c) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r9, 0x306, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1515bb0623a04b7a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004000) 23:01:12 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000009c0)={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x7, 0x50fb, 0x20, 0x500, 0x6, 0x800022, r8}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x40) 23:01:12 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xff, &(0x7f0000000b00)=@string={0xff, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4b84877cdd6e5"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:01:12 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 23:01:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000009c0)={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x7, 0x50fb, 0x20, 0x500, 0x6, 0x800022, r8}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x40) [ 2370.279714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2370.282860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:01:12 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x4090) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f00000007c0)={{0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, {0xa, 0x4e21, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}, 0x7, [0x5, 0x7, 0x2, 0xff, 0x50e5, 0x80000000, 0x6, 0x7373]}, 0x5c) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r9, 0x306, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1515bb0623a04b7a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004000) 23:01:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000009c0)={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x7, 0x50fb, 0x20, 0x500, 0x6, 0x800022, r8}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x40) 23:01:12 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}}, 0x4) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r1 = syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) r2 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x8, 0x200) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000800)={{0x1, 0x3, 0x4, 0x2, 0x2, 0x2}, 0xb2, [0x0, 0xe6, 0xffffffc0, 0x6164, 0x0, 0x4, 0x8, 0x8001, 0xebf8, 0x8, 0x4, 0xffffffff, 0x0, 0x1, 0x3, 0x3, 0x1000, 0x5, 0x0, 0x2000, 0x44, 0x1dac, 0x7, 0x7, 0x1, 0xc30, 0x1f, 0x8b16, 0x4, 0x4, 0x1fd, 0x1, 0x3, 0xd0, 0x3, 0x3, 0x2, 0x4, 0x3, 0x1000, 0x6, 0x2, 0x9f8, 0x9, 0x81, 0x43e, 0x3, 0x81, 0x2, 0x8, 0x1, 0x8000, 0x2, 0x6, 0x3, 0x4, 0x9, 0xfaac, 0x1, 0x9, 0x0, 0x3, 0x800, 0x7, 0x6, 0x2, 0x9, 0x7, 0x6, 0x8000, 0x36, 0x5, 0x2, 0x4, 0x6, 0x8001, 0x1, 0x98a0, 0x8d80, 0x1f, 0x3f, 0x2, 0x4, 0x3, 0xffff, 0x5, 0x81, 0x8, 0x7, 0x0, 0xff, 0x80, 0x1, 0x8f3, 0x2, 0xe2e0, 0x3, 0x9, 0xf88, 0x0, 0xc850, 0x2, 0xb6e, 0x1, 0x8, 0x547e, 0x6ac236db, 0x1, 0x2c8d, 0x1, 0x2, 0x4, 0x8, 0x6, 0x6, 0x100, 0x0, 0xfffffffe, 0xa1, 0x6, 0x10000, 0xa302, 0x80000001, 0x7, 0x0, 0x0, 0x6a, 0x6, 0x7, 0x3, 0x9, 0x0, 0x8, 0x2, 0xffff80bd, 0x401, 0x3f, 0x7ff, 0x1bd8, 0x1, 0x6, 0xb1, 0x3, 0x3, 0x200, 0x2, 0x1ff, 0xe933, 0x4, 0x7fffffff, 0x3, 0x0, 0x7fff, 0x40, 0x5, 0x5, 0x2, 0x7ff, 0x80, 0x7, 0x3aa1, 0x2, 0x8, 0x8, 0x1000, 0x5, 0x3, 0x0, 0x8f8, 0x80, 0x9bf9, 0x71, 0x6, 0x21, 0xb07, 0x0, 0x3f, 0x81, 0x8001, 0xffffffff, 0xfff, 0xba16, 0x8, 0x1f6, 0x9, 0xa, 0x0, 0x3, 0x4, 0x2, 0xffff0001, 0xffff, 0x3, 0x0, 0x5, 0x14, 0xc, 0x66c6, 0x7fffffff, 0xffffff78, 0x0, 0x9, 0x9, 0x40, 0x4, 0x7533, 0x80000000, 0x2, 0xa32, 0x5, 0x40, 0x81, 0x7fff, 0x2, 0xfffffffc, 0x8, 0x9, 0x7, 0x5, 0x8d, 0x80000000, 0xda, 0x80000001, 0x2, 0x2, 0x80, 0x6, 0xffffff00, 0x1, 0x7fff, 0x4, 0x4, 0x2, 0x10001, 0x0, 0x7fff, 0x1000, 0x1, 0x81, 0x7ff, 0xa88fe5b, 0x5, 0xffffff80, 0x400, 0x6, 0x6, 0x2, 0x8, 0xbfa0, 0x1000, 0x9, 0xffff, 0x8, 0x0, 0x8, 0x6, 0x3, 0x4, 0x1, 0x1f, 0x10001, 0x8000, 0xfffffb70, 0x1, 0x2, 0x7, 0x3, 0x2, 0x80000000, 0x4, 0x29f0, 0x1ff, 0x1ff, 0x46af0591, 0x68a954a, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x3, 0xffffda6d, 0x3, 0x7, 0x3, 0x3, 0x8c7d, 0x40, 0xea, 0x8, 0x9, 0x8, 0x2, 0x5, 0x2, 0x1, 0xffffffff, 0x10000, 0x0, 0x80, 0x7, 0x50, 0xfffffffb, 0x3, 0x1, 0x3f, 0x4, 0x1, 0x8000, 0xffff6417, 0x80, 0x1, 0x9bc, 0x3, 0x0, 0x20, 0x4, 0x8000, 0xf3, 0x10000, 0xa24c, 0x1, 0x20, 0x1ff, 0x40, 0x1, 0x0, 0x4, 0xd90, 0xac, 0x4, 0x5b, 0x7fffffff, 0x400, 0x101, 0x8, 0x101, 0x472, 0x6, 0x1, 0x1, 0x3, 0x0, 0x3, 0x40, 0x3, 0x1, 0x200, 0x3, 0x5, 0x1, 0x4, 0x395a, 0xd1b9, 0x1, 0x5, 0x3ff, 0x5, 0x2, 0x4, 0x4, 0x7, 0x3, 0x40, 0x3ff, 0x401, 0x1, 0x0, 0x9, 0x7fff, 0x0, 0x0, 0x80000000, 0x8, 0x80, 0x2, 0xfffffff8, 0x9, 0xffffff01, 0x4, 0x7, 0x8, 0x0, 0x20, 0x5e21, 0xffffffff, 0x4, 0x1f, 0x100, 0x248, 0x1ff, 0x8, 0x6fc, 0x8, 0x8, 0x3f, 0xff, 0x5, 0xffff, 0x7fff, 0x7, 0x9, 0x14, 0x7fffffff, 0xffffffff, 0x0, 0x81, 0x2, 0x7f, 0x1, 0xfff, 0x4, 0x7, 0x4, 0x2, 0x5, 0x10000, 0x6b18d17f, 0x6a3, 0xc48, 0x4, 0x2, 0x0, 0x4, 0x5, 0x1f, 0x6, 0x1ff, 0x12, 0x2, 0x5, 0x1f, 0x3d, 0xffff7fff, 0x7, 0x1, 0x1ff, 0x0, 0x6, 0x5, 0x8000, 0x5, 0xfffffffa, 0x6, 0xc17, 0x7ff, 0x80000000, 0x0, 0xe3f, 0x9, 0x62, 0x3, 0x4, 0x3ff, 0x2a19, 0x1, 0x5, 0x8000, 0x78, 0x226, 0x8, 0x1, 0xfffffffa, 0x400, 0x7, 0x3, 0x8, 0x1, 0x8, 0xa3f, 0x0, 0x4fc, 0x101, 0x6, 0x1, 0x6, 0x2, 0x1, 0x7ff, 0x8, 0x80000000, 0x1, 0x1, 0x1, 0x5, 0x4, 0x5, 0x8, 0x7, 0xfff, 0xde94, 0xf6c, 0x347, 0x9, 0x1, 0x3, 0x10000, 0x9, 0x8000, 0x8, 0x3, 0xfffffbff, 0x80000000, 0x1, 0x8001, 0x5, 0x1, 0x9, 0x9, 0x7, 0x2, 0x2, 0x6, 0x5, 0x3f, 0x3, 0xfff, 0x9, 0x0, 0xc195, 0x3, 0x5, 0x1, 0x500e, 0x4, 0x3, 0xff, 0xffff, 0x7, 0x1, 0x4, 0x8, 0x100, 0x65, 0x3, 0x7ff, 0x64e, 0x40, 0x0, 0x10001, 0x7fffffff, 0x7, 0xda3, 0x4, 0x376d7044, 0xf2a2, 0x1000, 0xff, 0x1, 0x8, 0x6, 0x7f, 0x8, 0x3f, 0x0, 0x57, 0x1, 0x7, 0x4, 0x7, 0x7, 0xfff, 0x8, 0x5bcf, 0x3ff, 0x300, 0x40000000, 0x1522, 0x100, 0x9, 0xfffffffb, 0x3ff, 0x30b, 0x6, 0xfff, 0x2, 0x39fa, 0x6, 0x3, 0x8, 0x7, 0x7, 0x5, 0x6, 0x80, 0x3, 0x1ff, 0x6, 0x7, 0xffffffff, 0x4, 0x4, 0xffffff80, 0x3, 0x9, 0xff, 0x6a, 0x8, 0x29, 0x1, 0x6, 0x2, 0x9, 0x6, 0x7, 0xffff, 0x80, 0xfff, 0xffe00000, 0x80000001, 0x10001, 0x1ff, 0xfff, 0xfff, 0x0, 0x7fffffff, 0x800, 0x9, 0x1, 0xfffffffb, 0x80000000, 0x2, 0x646, 0x3, 0x0, 0x3, 0x7, 0x6, 0x1, 0x1, 0x54aa, 0xfffffff7, 0x6, 0x80000001, 0x1, 0x0, 0x1, 0x9, 0x5849, 0x1f, 0x97af, 0x0, 0x60, 0x4, 0x8, 0x4, 0x9, 0x6, 0xfffffa03, 0x800, 0x5fbeaa1a, 0x80000001, 0x0, 0xfffffffd, 0x4, 0x101, 0xdd3f, 0x6, 0x6, 0x483, 0x6, 0x9, 0x9, 0xfff, 0x1, 0x0, 0x6, 0x7, 0x2, 0x4, 0x0, 0x20, 0x60, 0xaaa, 0x9, 0x40, 0x10000, 0x0, 0xf0000000, 0x7fffffff, 0x5, 0x101, 0x6, 0x7ff, 0x101, 0x9798, 0x2, 0x7fff, 0x10001, 0x8001, 0x4, 0x7, 0x18, 0x8, 0xd95a, 0x4, 0x7, 0x8, 0xb282, 0x1, 0x0, 0x6, 0x4, 0xb3f, 0x380, 0x8000, 0x3, 0x0, 0xb03, 0x0, 0x80000000, 0x8001, 0x2, 0x0, 0x7f, 0x6, 0x4, 0x2, 0x5, 0xc7, 0x1f, 0x0, 0x81, 0xffffffff, 0x80000000, 0x9, 0xffffffff, 0x80000000, 0x7fffffff, 0x4, 0x20, 0xcf0, 0xe80c, 0x8, 0x6, 0x1000, 0x78, 0x4, 0x5, 0x6, 0xc67, 0x9, 0x81, 0x5, 0x5, 0xf4, 0x977b, 0x3ff, 0x9, 0x8000, 0xff, 0x5, 0xded5, 0x3, 0x800, 0x3, 0x1, 0x4, 0x4, 0xc9c, 0x7, 0x7fd, 0xa4a1, 0x3, 0x6, 0x2, 0x5c, 0x7, 0x2, 0x2, 0x10000, 0x400, 0x800, 0x8, 0x0, 0x1, 0x80000, 0x7, 0x478, 0x100, 0x1f, 0x8, 0x6, 0xff, 0x1, 0xffff, 0x1, 0x7, 0x403a, 0x3ff, 0xffff, 0x81, 0xe0, 0x8, 0x1000, 0x8, 0x831f, 0x9046, 0x6, 0x40, 0x5cfc, 0xfffffff8, 0x9, 0x9dc, 0x3, 0x7fffffff, 0x80, 0x7, 0x1, 0x4486, 0x1, 0x5, 0x8, 0x1ff, 0x1, 0x9, 0x8, 0x2, 0x7ff, 0x26, 0x0, 0x4ff5, 0x40, 0x7, 0x8, 0x8, 0x1ff, 0x7, 0x4, 0x1f, 0x1000, 0x590, 0x3, 0x81, 0xffff, 0x4, 0x2, 0xc9d1, 0x0, 0x2, 0x7fffffff, 0x8, 0x6, 0x6, 0x5, 0x8bdd, 0x6, 0x101, 0x6c325de4, 0x4, 0x7f, 0xfffffff7, 0x4, 0x200, 0x40, 0x3f, 0x6, 0x101, 0x2, 0x401, 0xfc0000, 0x3, 0x74, 0x7, 0xffff845a, 0x38000000, 0x7, 0xffffff92, 0x4, 0x0, 0x2, 0x400bcb26, 0x100, 0x1, 0x3, 0x1, 0x5f63, 0x1, 0x2, 0x80000001, 0x6, 0xff, 0x1000, 0x40, 0x3b, 0x9, 0x8, 0x87f4, 0x3, 0xd34, 0x20, 0xfffffffc, 0x1f, 0x3ff, 0x0, 0x7, 0x3, 0x6, 0xbfd, 0xfffffe01, 0x49536275, 0x7fffffff, 0x4, 0xb9e, 0x1, 0x3, 0x1, 0x89a, 0xfffffffd, 0x13, 0x1, 0x9958, 0x2, 0x5, 0x81, 0x5, 0x3, 0x40, 0x41, 0x2, 0x1, 0x9, 0x1, 0x5f, 0x23, 0x20, 0x8, 0x15d, 0xff, 0x6, 0x7f, 0x7, 0x8, 0x8000, 0x80000001, 0x0, 0x2, 0x3f, 0x1369, 0x1, 0x2, 0x9, 0x401, 0x7f, 0x6, 0x8, 0x1, 0xa92, 0x10a, 0x1, 0x0, 0x14000, 0x2, 0x1, 0x10000, 0x0, 0xfffffff7, 0x2, 0x5, 0xdbcc, 0x9, 0x5, 0x4, 0x2, 0x4, 0x2, 0x2, 0xfffffffc, 0x20, 0x6, 0x1, 0x2, 0x5, 0x7fffffff, 0x5, 0x4dba, 0x2, 0x4, 0x3, 0x7, 0xc1, 0x8, 0x97, 0xfffffff7, 0x7fffffff, 0x0, 0x100, 0x5, 0x8, 0x4, 0x2, 0x1000, 0x3, 0x100, 0xef7d, 0x9, 0x9, 0x8000, 0x400, 0x7f, 0xffffffff, 0xe4, 0x3, 0x200, 0x80, 0x7ff, 0x4, 0x32, 0x8, 0x5, 0x8001, 0xffff8000, 0x400, 0x0, 0x8, 0x83, 0x8, 0x3ff, 0x8000, 0x1, 0xffff, 0x6, 0x52, 0x658]}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000001840)=0x3) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x804) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x24, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x24, r0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000001bc0)={0x1, 0x1, 0x20, 0x7, 0x7f, 0x1}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 23:01:12 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}}, 0x4) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r1 = syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) r2 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x8, 0x200) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000800)={{0x1, 0x3, 0x4, 0x2, 0x2, 0x2}, 0xb2, [0x0, 0xe6, 0xffffffc0, 0x6164, 0x0, 0x4, 0x8, 0x8001, 0xebf8, 0x8, 0x4, 0xffffffff, 0x0, 0x1, 0x3, 0x3, 0x1000, 0x5, 0x0, 0x2000, 0x44, 0x1dac, 0x7, 0x7, 0x1, 0xc30, 0x1f, 0x8b16, 0x4, 0x4, 0x1fd, 0x1, 0x3, 0xd0, 0x3, 0x3, 0x2, 0x4, 0x3, 0x1000, 0x6, 0x2, 0x9f8, 0x9, 0x81, 0x43e, 0x3, 0x81, 0x2, 0x8, 0x1, 0x8000, 0x2, 0x6, 0x3, 0x4, 0x9, 0xfaac, 0x1, 0x9, 0x0, 0x3, 0x800, 0x7, 0x6, 0x2, 0x9, 0x7, 0x6, 0x8000, 0x36, 0x5, 0x2, 0x4, 0x6, 0x8001, 0x1, 0x98a0, 0x8d80, 0x1f, 0x3f, 0x2, 0x4, 0x3, 0xffff, 0x5, 0x81, 0x8, 0x7, 0x0, 0xff, 0x80, 0x1, 0x8f3, 0x2, 0xe2e0, 0x3, 0x9, 0xf88, 0x0, 0xc850, 0x2, 0xb6e, 0x1, 0x8, 0x547e, 0x6ac236db, 0x1, 0x2c8d, 0x1, 0x2, 0x4, 0x8, 0x6, 0x6, 0x100, 0x0, 0xfffffffe, 0xa1, 0x6, 0x10000, 0xa302, 0x80000001, 0x7, 0x0, 0x0, 0x6a, 0x6, 0x7, 0x3, 0x9, 0x0, 0x8, 0x2, 0xffff80bd, 0x401, 0x3f, 0x7ff, 0x1bd8, 0x1, 0x6, 0xb1, 0x3, 0x3, 0x200, 0x2, 0x1ff, 0xe933, 0x4, 0x7fffffff, 0x3, 0x0, 0x7fff, 0x40, 0x5, 0x5, 0x2, 0x7ff, 0x80, 0x7, 0x3aa1, 0x2, 0x8, 0x8, 0x1000, 0x5, 0x3, 0x0, 0x8f8, 0x80, 0x9bf9, 0x71, 0x6, 0x21, 0xb07, 0x0, 0x3f, 0x81, 0x8001, 0xffffffff, 0xfff, 0xba16, 0x8, 0x1f6, 0x9, 0xa, 0x0, 0x3, 0x4, 0x2, 0xffff0001, 0xffff, 0x3, 0x0, 0x5, 0x14, 0xc, 0x66c6, 0x7fffffff, 0xffffff78, 0x0, 0x9, 0x9, 0x40, 0x4, 0x7533, 0x80000000, 0x2, 0xa32, 0x5, 0x40, 0x81, 0x7fff, 0x2, 0xfffffffc, 0x8, 0x9, 0x7, 0x5, 0x8d, 0x80000000, 0xda, 0x80000001, 0x2, 0x2, 0x80, 0x6, 0xffffff00, 0x1, 0x7fff, 0x4, 0x4, 0x2, 0x10001, 0x0, 0x7fff, 0x1000, 0x1, 0x81, 0x7ff, 0xa88fe5b, 0x5, 0xffffff80, 0x400, 0x6, 0x6, 0x2, 0x8, 0xbfa0, 0x1000, 0x9, 0xffff, 0x8, 0x0, 0x8, 0x6, 0x3, 0x4, 0x1, 0x1f, 0x10001, 0x8000, 0xfffffb70, 0x1, 0x2, 0x7, 0x3, 0x2, 0x80000000, 0x4, 0x29f0, 0x1ff, 0x1ff, 0x46af0591, 0x68a954a, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x3, 0xffffda6d, 0x3, 0x7, 0x3, 0x3, 0x8c7d, 0x40, 0xea, 0x8, 0x9, 0x8, 0x2, 0x5, 0x2, 0x1, 0xffffffff, 0x10000, 0x0, 0x80, 0x7, 0x50, 0xfffffffb, 0x3, 0x1, 0x3f, 0x4, 0x1, 0x8000, 0xffff6417, 0x80, 0x1, 0x9bc, 0x3, 0x0, 0x20, 0x4, 0x8000, 0xf3, 0x10000, 0xa24c, 0x1, 0x20, 0x1ff, 0x40, 0x1, 0x0, 0x4, 0xd90, 0xac, 0x4, 0x5b, 0x7fffffff, 0x400, 0x101, 0x8, 0x101, 0x472, 0x6, 0x1, 0x1, 0x3, 0x0, 0x3, 0x40, 0x3, 0x1, 0x200, 0x3, 0x5, 0x1, 0x4, 0x395a, 0xd1b9, 0x1, 0x5, 0x3ff, 0x5, 0x2, 0x4, 0x4, 0x7, 0x3, 0x40, 0x3ff, 0x401, 0x1, 0x0, 0x9, 0x7fff, 0x0, 0x0, 0x80000000, 0x8, 0x80, 0x2, 0xfffffff8, 0x9, 0xffffff01, 0x4, 0x7, 0x8, 0x0, 0x20, 0x5e21, 0xffffffff, 0x4, 0x1f, 0x100, 0x248, 0x1ff, 0x8, 0x6fc, 0x8, 0x8, 0x3f, 0xff, 0x5, 0xffff, 0x7fff, 0x7, 0x9, 0x14, 0x7fffffff, 0xffffffff, 0x0, 0x81, 0x2, 0x7f, 0x1, 0xfff, 0x4, 0x7, 0x4, 0x2, 0x5, 0x10000, 0x6b18d17f, 0x6a3, 0xc48, 0x4, 0x2, 0x0, 0x4, 0x5, 0x1f, 0x6, 0x1ff, 0x12, 0x2, 0x5, 0x1f, 0x3d, 0xffff7fff, 0x7, 0x1, 0x1ff, 0x0, 0x6, 0x5, 0x8000, 0x5, 0xfffffffa, 0x6, 0xc17, 0x7ff, 0x80000000, 0x0, 0xe3f, 0x9, 0x62, 0x3, 0x4, 0x3ff, 0x2a19, 0x1, 0x5, 0x8000, 0x78, 0x226, 0x8, 0x1, 0xfffffffa, 0x400, 0x7, 0x3, 0x8, 0x1, 0x8, 0xa3f, 0x0, 0x4fc, 0x101, 0x6, 0x1, 0x6, 0x2, 0x1, 0x7ff, 0x8, 0x80000000, 0x1, 0x1, 0x1, 0x5, 0x4, 0x5, 0x8, 0x7, 0xfff, 0xde94, 0xf6c, 0x347, 0x9, 0x1, 0x3, 0x10000, 0x9, 0x8000, 0x8, 0x3, 0xfffffbff, 0x80000000, 0x1, 0x8001, 0x5, 0x1, 0x9, 0x9, 0x7, 0x2, 0x2, 0x6, 0x5, 0x3f, 0x3, 0xfff, 0x9, 0x0, 0xc195, 0x3, 0x5, 0x1, 0x500e, 0x4, 0x3, 0xff, 0xffff, 0x7, 0x1, 0x4, 0x8, 0x100, 0x65, 0x3, 0x7ff, 0x64e, 0x40, 0x0, 0x10001, 0x7fffffff, 0x7, 0xda3, 0x4, 0x376d7044, 0xf2a2, 0x1000, 0xff, 0x1, 0x8, 0x6, 0x7f, 0x8, 0x3f, 0x0, 0x57, 0x1, 0x7, 0x4, 0x7, 0x7, 0xfff, 0x8, 0x5bcf, 0x3ff, 0x300, 0x40000000, 0x1522, 0x100, 0x9, 0xfffffffb, 0x3ff, 0x30b, 0x6, 0xfff, 0x2, 0x39fa, 0x6, 0x3, 0x8, 0x7, 0x7, 0x5, 0x6, 0x80, 0x3, 0x1ff, 0x6, 0x7, 0xffffffff, 0x4, 0x4, 0xffffff80, 0x3, 0x9, 0xff, 0x6a, 0x8, 0x29, 0x1, 0x6, 0x2, 0x9, 0x6, 0x7, 0xffff, 0x80, 0xfff, 0xffe00000, 0x80000001, 0x10001, 0x1ff, 0xfff, 0xfff, 0x0, 0x7fffffff, 0x800, 0x9, 0x1, 0xfffffffb, 0x80000000, 0x2, 0x646, 0x3, 0x0, 0x3, 0x7, 0x6, 0x1, 0x1, 0x54aa, 0xfffffff7, 0x6, 0x80000001, 0x1, 0x0, 0x1, 0x9, 0x5849, 0x1f, 0x97af, 0x0, 0x60, 0x4, 0x8, 0x4, 0x9, 0x6, 0xfffffa03, 0x800, 0x5fbeaa1a, 0x80000001, 0x0, 0xfffffffd, 0x4, 0x101, 0xdd3f, 0x6, 0x6, 0x483, 0x6, 0x9, 0x9, 0xfff, 0x1, 0x0, 0x6, 0x7, 0x2, 0x4, 0x0, 0x20, 0x60, 0xaaa, 0x9, 0x40, 0x10000, 0x0, 0xf0000000, 0x7fffffff, 0x5, 0x101, 0x6, 0x7ff, 0x101, 0x9798, 0x2, 0x7fff, 0x10001, 0x8001, 0x4, 0x7, 0x18, 0x8, 0xd95a, 0x4, 0x7, 0x8, 0xb282, 0x1, 0x0, 0x6, 0x4, 0xb3f, 0x380, 0x8000, 0x3, 0x0, 0xb03, 0x0, 0x80000000, 0x8001, 0x2, 0x0, 0x7f, 0x6, 0x4, 0x2, 0x5, 0xc7, 0x1f, 0x0, 0x81, 0xffffffff, 0x80000000, 0x9, 0xffffffff, 0x80000000, 0x7fffffff, 0x4, 0x20, 0xcf0, 0xe80c, 0x8, 0x6, 0x1000, 0x78, 0x4, 0x5, 0x6, 0xc67, 0x9, 0x81, 0x5, 0x5, 0xf4, 0x977b, 0x3ff, 0x9, 0x8000, 0xff, 0x5, 0xded5, 0x3, 0x800, 0x3, 0x1, 0x4, 0x4, 0xc9c, 0x7, 0x7fd, 0xa4a1, 0x3, 0x6, 0x2, 0x5c, 0x7, 0x2, 0x2, 0x10000, 0x400, 0x800, 0x8, 0x0, 0x1, 0x80000, 0x7, 0x478, 0x100, 0x1f, 0x8, 0x6, 0xff, 0x1, 0xffff, 0x1, 0x7, 0x403a, 0x3ff, 0xffff, 0x81, 0xe0, 0x8, 0x1000, 0x8, 0x831f, 0x9046, 0x6, 0x40, 0x5cfc, 0xfffffff8, 0x9, 0x9dc, 0x3, 0x7fffffff, 0x80, 0x7, 0x1, 0x4486, 0x1, 0x5, 0x8, 0x1ff, 0x1, 0x9, 0x8, 0x2, 0x7ff, 0x26, 0x0, 0x4ff5, 0x40, 0x7, 0x8, 0x8, 0x1ff, 0x7, 0x4, 0x1f, 0x1000, 0x590, 0x3, 0x81, 0xffff, 0x4, 0x2, 0xc9d1, 0x0, 0x2, 0x7fffffff, 0x8, 0x6, 0x6, 0x5, 0x8bdd, 0x6, 0x101, 0x6c325de4, 0x4, 0x7f, 0xfffffff7, 0x4, 0x200, 0x40, 0x3f, 0x6, 0x101, 0x2, 0x401, 0xfc0000, 0x3, 0x74, 0x7, 0xffff845a, 0x38000000, 0x7, 0xffffff92, 0x4, 0x0, 0x2, 0x400bcb26, 0x100, 0x1, 0x3, 0x1, 0x5f63, 0x1, 0x2, 0x80000001, 0x6, 0xff, 0x1000, 0x40, 0x3b, 0x9, 0x8, 0x87f4, 0x3, 0xd34, 0x20, 0xfffffffc, 0x1f, 0x3ff, 0x0, 0x7, 0x3, 0x6, 0xbfd, 0xfffffe01, 0x49536275, 0x7fffffff, 0x4, 0xb9e, 0x1, 0x3, 0x1, 0x89a, 0xfffffffd, 0x13, 0x1, 0x9958, 0x2, 0x5, 0x81, 0x5, 0x3, 0x40, 0x41, 0x2, 0x1, 0x9, 0x1, 0x5f, 0x23, 0x20, 0x8, 0x15d, 0xff, 0x6, 0x7f, 0x7, 0x8, 0x8000, 0x80000001, 0x0, 0x2, 0x3f, 0x1369, 0x1, 0x2, 0x9, 0x401, 0x7f, 0x6, 0x8, 0x1, 0xa92, 0x10a, 0x1, 0x0, 0x14000, 0x2, 0x1, 0x10000, 0x0, 0xfffffff7, 0x2, 0x5, 0xdbcc, 0x9, 0x5, 0x4, 0x2, 0x4, 0x2, 0x2, 0xfffffffc, 0x20, 0x6, 0x1, 0x2, 0x5, 0x7fffffff, 0x5, 0x4dba, 0x2, 0x4, 0x3, 0x7, 0xc1, 0x8, 0x97, 0xfffffff7, 0x7fffffff, 0x0, 0x100, 0x5, 0x8, 0x4, 0x2, 0x1000, 0x3, 0x100, 0xef7d, 0x9, 0x9, 0x8000, 0x400, 0x7f, 0xffffffff, 0xe4, 0x3, 0x200, 0x80, 0x7ff, 0x4, 0x32, 0x8, 0x5, 0x8001, 0xffff8000, 0x400, 0x0, 0x8, 0x83, 0x8, 0x3ff, 0x8000, 0x1, 0xffff, 0x6, 0x52, 0x658]}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000001840)=0x3) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x804) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x24, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x24, r0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000001bc0)={0x1, 0x1, 0x20, 0x7, 0x7f, 0x1}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 23:01:12 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 23:01:13 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000009c0)={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x7, 0x50fb, 0x20, 0x500, 0x6, 0x800022, r8}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x40) 23:01:13 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x4090) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f00000007c0)={{0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, {0xa, 0x4e21, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}, 0x7, [0x5, 0x7, 0x2, 0xff, 0x50e5, 0x80000000, 0x6, 0x7373]}, 0x5c) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r9, 0x306, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1515bb0623a04b7a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004000) 23:01:13 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}}, 0x4) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r1 = syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) r2 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x8, 0x200) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000800)={{0x1, 0x3, 0x4, 0x2, 0x2, 0x2}, 0xb2, [0x0, 0xe6, 0xffffffc0, 0x6164, 0x0, 0x4, 0x8, 0x8001, 0xebf8, 0x8, 0x4, 0xffffffff, 0x0, 0x1, 0x3, 0x3, 0x1000, 0x5, 0x0, 0x2000, 0x44, 0x1dac, 0x7, 0x7, 0x1, 0xc30, 0x1f, 0x8b16, 0x4, 0x4, 0x1fd, 0x1, 0x3, 0xd0, 0x3, 0x3, 0x2, 0x4, 0x3, 0x1000, 0x6, 0x2, 0x9f8, 0x9, 0x81, 0x43e, 0x3, 0x81, 0x2, 0x8, 0x1, 0x8000, 0x2, 0x6, 0x3, 0x4, 0x9, 0xfaac, 0x1, 0x9, 0x0, 0x3, 0x800, 0x7, 0x6, 0x2, 0x9, 0x7, 0x6, 0x8000, 0x36, 0x5, 0x2, 0x4, 0x6, 0x8001, 0x1, 0x98a0, 0x8d80, 0x1f, 0x3f, 0x2, 0x4, 0x3, 0xffff, 0x5, 0x81, 0x8, 0x7, 0x0, 0xff, 0x80, 0x1, 0x8f3, 0x2, 0xe2e0, 0x3, 0x9, 0xf88, 0x0, 0xc850, 0x2, 0xb6e, 0x1, 0x8, 0x547e, 0x6ac236db, 0x1, 0x2c8d, 0x1, 0x2, 0x4, 0x8, 0x6, 0x6, 0x100, 0x0, 0xfffffffe, 0xa1, 0x6, 0x10000, 0xa302, 0x80000001, 0x7, 0x0, 0x0, 0x6a, 0x6, 0x7, 0x3, 0x9, 0x0, 0x8, 0x2, 0xffff80bd, 0x401, 0x3f, 0x7ff, 0x1bd8, 0x1, 0x6, 0xb1, 0x3, 0x3, 0x200, 0x2, 0x1ff, 0xe933, 0x4, 0x7fffffff, 0x3, 0x0, 0x7fff, 0x40, 0x5, 0x5, 0x2, 0x7ff, 0x80, 0x7, 0x3aa1, 0x2, 0x8, 0x8, 0x1000, 0x5, 0x3, 0x0, 0x8f8, 0x80, 0x9bf9, 0x71, 0x6, 0x21, 0xb07, 0x0, 0x3f, 0x81, 0x8001, 0xffffffff, 0xfff, 0xba16, 0x8, 0x1f6, 0x9, 0xa, 0x0, 0x3, 0x4, 0x2, 0xffff0001, 0xffff, 0x3, 0x0, 0x5, 0x14, 0xc, 0x66c6, 0x7fffffff, 0xffffff78, 0x0, 0x9, 0x9, 0x40, 0x4, 0x7533, 0x80000000, 0x2, 0xa32, 0x5, 0x40, 0x81, 0x7fff, 0x2, 0xfffffffc, 0x8, 0x9, 0x7, 0x5, 0x8d, 0x80000000, 0xda, 0x80000001, 0x2, 0x2, 0x80, 0x6, 0xffffff00, 0x1, 0x7fff, 0x4, 0x4, 0x2, 0x10001, 0x0, 0x7fff, 0x1000, 0x1, 0x81, 0x7ff, 0xa88fe5b, 0x5, 0xffffff80, 0x400, 0x6, 0x6, 0x2, 0x8, 0xbfa0, 0x1000, 0x9, 0xffff, 0x8, 0x0, 0x8, 0x6, 0x3, 0x4, 0x1, 0x1f, 0x10001, 0x8000, 0xfffffb70, 0x1, 0x2, 0x7, 0x3, 0x2, 0x80000000, 0x4, 0x29f0, 0x1ff, 0x1ff, 0x46af0591, 0x68a954a, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x3, 0xffffda6d, 0x3, 0x7, 0x3, 0x3, 0x8c7d, 0x40, 0xea, 0x8, 0x9, 0x8, 0x2, 0x5, 0x2, 0x1, 0xffffffff, 0x10000, 0x0, 0x80, 0x7, 0x50, 0xfffffffb, 0x3, 0x1, 0x3f, 0x4, 0x1, 0x8000, 0xffff6417, 0x80, 0x1, 0x9bc, 0x3, 0x0, 0x20, 0x4, 0x8000, 0xf3, 0x10000, 0xa24c, 0x1, 0x20, 0x1ff, 0x40, 0x1, 0x0, 0x4, 0xd90, 0xac, 0x4, 0x5b, 0x7fffffff, 0x400, 0x101, 0x8, 0x101, 0x472, 0x6, 0x1, 0x1, 0x3, 0x0, 0x3, 0x40, 0x3, 0x1, 0x200, 0x3, 0x5, 0x1, 0x4, 0x395a, 0xd1b9, 0x1, 0x5, 0x3ff, 0x5, 0x2, 0x4, 0x4, 0x7, 0x3, 0x40, 0x3ff, 0x401, 0x1, 0x0, 0x9, 0x7fff, 0x0, 0x0, 0x80000000, 0x8, 0x80, 0x2, 0xfffffff8, 0x9, 0xffffff01, 0x4, 0x7, 0x8, 0x0, 0x20, 0x5e21, 0xffffffff, 0x4, 0x1f, 0x100, 0x248, 0x1ff, 0x8, 0x6fc, 0x8, 0x8, 0x3f, 0xff, 0x5, 0xffff, 0x7fff, 0x7, 0x9, 0x14, 0x7fffffff, 0xffffffff, 0x0, 0x81, 0x2, 0x7f, 0x1, 0xfff, 0x4, 0x7, 0x4, 0x2, 0x5, 0x10000, 0x6b18d17f, 0x6a3, 0xc48, 0x4, 0x2, 0x0, 0x4, 0x5, 0x1f, 0x6, 0x1ff, 0x12, 0x2, 0x5, 0x1f, 0x3d, 0xffff7fff, 0x7, 0x1, 0x1ff, 0x0, 0x6, 0x5, 0x8000, 0x5, 0xfffffffa, 0x6, 0xc17, 0x7ff, 0x80000000, 0x0, 0xe3f, 0x9, 0x62, 0x3, 0x4, 0x3ff, 0x2a19, 0x1, 0x5, 0x8000, 0x78, 0x226, 0x8, 0x1, 0xfffffffa, 0x400, 0x7, 0x3, 0x8, 0x1, 0x8, 0xa3f, 0x0, 0x4fc, 0x101, 0x6, 0x1, 0x6, 0x2, 0x1, 0x7ff, 0x8, 0x80000000, 0x1, 0x1, 0x1, 0x5, 0x4, 0x5, 0x8, 0x7, 0xfff, 0xde94, 0xf6c, 0x347, 0x9, 0x1, 0x3, 0x10000, 0x9, 0x8000, 0x8, 0x3, 0xfffffbff, 0x80000000, 0x1, 0x8001, 0x5, 0x1, 0x9, 0x9, 0x7, 0x2, 0x2, 0x6, 0x5, 0x3f, 0x3, 0xfff, 0x9, 0x0, 0xc195, 0x3, 0x5, 0x1, 0x500e, 0x4, 0x3, 0xff, 0xffff, 0x7, 0x1, 0x4, 0x8, 0x100, 0x65, 0x3, 0x7ff, 0x64e, 0x40, 0x0, 0x10001, 0x7fffffff, 0x7, 0xda3, 0x4, 0x376d7044, 0xf2a2, 0x1000, 0xff, 0x1, 0x8, 0x6, 0x7f, 0x8, 0x3f, 0x0, 0x57, 0x1, 0x7, 0x4, 0x7, 0x7, 0xfff, 0x8, 0x5bcf, 0x3ff, 0x300, 0x40000000, 0x1522, 0x100, 0x9, 0xfffffffb, 0x3ff, 0x30b, 0x6, 0xfff, 0x2, 0x39fa, 0x6, 0x3, 0x8, 0x7, 0x7, 0x5, 0x6, 0x80, 0x3, 0x1ff, 0x6, 0x7, 0xffffffff, 0x4, 0x4, 0xffffff80, 0x3, 0x9, 0xff, 0x6a, 0x8, 0x29, 0x1, 0x6, 0x2, 0x9, 0x6, 0x7, 0xffff, 0x80, 0xfff, 0xffe00000, 0x80000001, 0x10001, 0x1ff, 0xfff, 0xfff, 0x0, 0x7fffffff, 0x800, 0x9, 0x1, 0xfffffffb, 0x80000000, 0x2, 0x646, 0x3, 0x0, 0x3, 0x7, 0x6, 0x1, 0x1, 0x54aa, 0xfffffff7, 0x6, 0x80000001, 0x1, 0x0, 0x1, 0x9, 0x5849, 0x1f, 0x97af, 0x0, 0x60, 0x4, 0x8, 0x4, 0x9, 0x6, 0xfffffa03, 0x800, 0x5fbeaa1a, 0x80000001, 0x0, 0xfffffffd, 0x4, 0x101, 0xdd3f, 0x6, 0x6, 0x483, 0x6, 0x9, 0x9, 0xfff, 0x1, 0x0, 0x6, 0x7, 0x2, 0x4, 0x0, 0x20, 0x60, 0xaaa, 0x9, 0x40, 0x10000, 0x0, 0xf0000000, 0x7fffffff, 0x5, 0x101, 0x6, 0x7ff, 0x101, 0x9798, 0x2, 0x7fff, 0x10001, 0x8001, 0x4, 0x7, 0x18, 0x8, 0xd95a, 0x4, 0x7, 0x8, 0xb282, 0x1, 0x0, 0x6, 0x4, 0xb3f, 0x380, 0x8000, 0x3, 0x0, 0xb03, 0x0, 0x80000000, 0x8001, 0x2, 0x0, 0x7f, 0x6, 0x4, 0x2, 0x5, 0xc7, 0x1f, 0x0, 0x81, 0xffffffff, 0x80000000, 0x9, 0xffffffff, 0x80000000, 0x7fffffff, 0x4, 0x20, 0xcf0, 0xe80c, 0x8, 0x6, 0x1000, 0x78, 0x4, 0x5, 0x6, 0xc67, 0x9, 0x81, 0x5, 0x5, 0xf4, 0x977b, 0x3ff, 0x9, 0x8000, 0xff, 0x5, 0xded5, 0x3, 0x800, 0x3, 0x1, 0x4, 0x4, 0xc9c, 0x7, 0x7fd, 0xa4a1, 0x3, 0x6, 0x2, 0x5c, 0x7, 0x2, 0x2, 0x10000, 0x400, 0x800, 0x8, 0x0, 0x1, 0x80000, 0x7, 0x478, 0x100, 0x1f, 0x8, 0x6, 0xff, 0x1, 0xffff, 0x1, 0x7, 0x403a, 0x3ff, 0xffff, 0x81, 0xe0, 0x8, 0x1000, 0x8, 0x831f, 0x9046, 0x6, 0x40, 0x5cfc, 0xfffffff8, 0x9, 0x9dc, 0x3, 0x7fffffff, 0x80, 0x7, 0x1, 0x4486, 0x1, 0x5, 0x8, 0x1ff, 0x1, 0x9, 0x8, 0x2, 0x7ff, 0x26, 0x0, 0x4ff5, 0x40, 0x7, 0x8, 0x8, 0x1ff, 0x7, 0x4, 0x1f, 0x1000, 0x590, 0x3, 0x81, 0xffff, 0x4, 0x2, 0xc9d1, 0x0, 0x2, 0x7fffffff, 0x8, 0x6, 0x6, 0x5, 0x8bdd, 0x6, 0x101, 0x6c325de4, 0x4, 0x7f, 0xfffffff7, 0x4, 0x200, 0x40, 0x3f, 0x6, 0x101, 0x2, 0x401, 0xfc0000, 0x3, 0x74, 0x7, 0xffff845a, 0x38000000, 0x7, 0xffffff92, 0x4, 0x0, 0x2, 0x400bcb26, 0x100, 0x1, 0x3, 0x1, 0x5f63, 0x1, 0x2, 0x80000001, 0x6, 0xff, 0x1000, 0x40, 0x3b, 0x9, 0x8, 0x87f4, 0x3, 0xd34, 0x20, 0xfffffffc, 0x1f, 0x3ff, 0x0, 0x7, 0x3, 0x6, 0xbfd, 0xfffffe01, 0x49536275, 0x7fffffff, 0x4, 0xb9e, 0x1, 0x3, 0x1, 0x89a, 0xfffffffd, 0x13, 0x1, 0x9958, 0x2, 0x5, 0x81, 0x5, 0x3, 0x40, 0x41, 0x2, 0x1, 0x9, 0x1, 0x5f, 0x23, 0x20, 0x8, 0x15d, 0xff, 0x6, 0x7f, 0x7, 0x8, 0x8000, 0x80000001, 0x0, 0x2, 0x3f, 0x1369, 0x1, 0x2, 0x9, 0x401, 0x7f, 0x6, 0x8, 0x1, 0xa92, 0x10a, 0x1, 0x0, 0x14000, 0x2, 0x1, 0x10000, 0x0, 0xfffffff7, 0x2, 0x5, 0xdbcc, 0x9, 0x5, 0x4, 0x2, 0x4, 0x2, 0x2, 0xfffffffc, 0x20, 0x6, 0x1, 0x2, 0x5, 0x7fffffff, 0x5, 0x4dba, 0x2, 0x4, 0x3, 0x7, 0xc1, 0x8, 0x97, 0xfffffff7, 0x7fffffff, 0x0, 0x100, 0x5, 0x8, 0x4, 0x2, 0x1000, 0x3, 0x100, 0xef7d, 0x9, 0x9, 0x8000, 0x400, 0x7f, 0xffffffff, 0xe4, 0x3, 0x200, 0x80, 0x7ff, 0x4, 0x32, 0x8, 0x5, 0x8001, 0xffff8000, 0x400, 0x0, 0x8, 0x83, 0x8, 0x3ff, 0x8000, 0x1, 0xffff, 0x6, 0x52, 0x658]}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000001840)=0x3) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x804) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x24, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x24, r0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000001bc0)={0x1, 0x1, 0x20, 0x7, 0x7f, 0x1}) 23:01:13 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x4090) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f00000007c0)={{0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, {0xa, 0x4e21, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}, 0x7, [0x5, 0x7, 0x2, 0xff, 0x50e5, 0x80000000, 0x6, 0x7373]}, 0x5c) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r9, 0x306, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1515bb0623a04b7a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004000) 23:01:13 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x4090) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f00000007c0)={{0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, {0xa, 0x4e21, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}, 0x7, [0x5, 0x7, 0x2, 0xff, 0x50e5, 0x80000000, 0x6, 0x7373]}, 0x5c) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r9, 0x306, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1515bb0623a04b7a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004000) 23:01:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000009c0)={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x7, 0x50fb, 0x20, 0x500, 0x6, 0x800022, r8}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008844}, 0x40) 23:01:13 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0xff, &(0x7f0000000b00)=@string={0xff, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:01:13 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000009c0)={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x7, 0x50fb, 0x20, 0x500, 0x6, 0x800022, r8}) [ 2370.922132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2370.926987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:01:13 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000009c0)={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x7, 0x50fb, 0x20, 0x500, 0x6, 0x800022, r8}) 23:01:21 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x4090) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f00000007c0)={{0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, {0xa, 0x4e21, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}, 0x7, [0x5, 0x7, 0x2, 0xff, 0x50e5, 0x80000000, 0x6, 0x7373]}, 0x5c) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r9, 0x306, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1515bb0623a04b7a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004000) 23:01:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'}) 23:01:21 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x4090) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f00000007c0)={{0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, {0xa, 0x4e21, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}, 0x7, [0x5, 0x7, 0x2, 0xff, 0x50e5, 0x80000000, 0x6, 0x7373]}, 0x5c) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r9, 0x306, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1515bb0623a04b7a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004000) 23:01:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000009c0)={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, 0x7, 0x50fb, 0x20, 0x500, 0x6, 0x800022, r8}) 23:01:21 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) accept$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040054) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@local, @in=@multicast2}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000ac0)=0xe8) 23:01:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'}) 23:01:21 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x4, [{0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:01:21 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}}, 0x4) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r1 = syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) r2 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x8, 0x200) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000800)={{0x1, 0x3, 0x4, 0x2, 0x2, 0x2}, 0xb2, [0x0, 0xe6, 0xffffffc0, 0x6164, 0x0, 0x4, 0x8, 0x8001, 0xebf8, 0x8, 0x4, 0xffffffff, 0x0, 0x1, 0x3, 0x3, 0x1000, 0x5, 0x0, 0x2000, 0x44, 0x1dac, 0x7, 0x7, 0x1, 0xc30, 0x1f, 0x8b16, 0x4, 0x4, 0x1fd, 0x1, 0x3, 0xd0, 0x3, 0x3, 0x2, 0x4, 0x3, 0x1000, 0x6, 0x2, 0x9f8, 0x9, 0x81, 0x43e, 0x3, 0x81, 0x2, 0x8, 0x1, 0x8000, 0x2, 0x6, 0x3, 0x4, 0x9, 0xfaac, 0x1, 0x9, 0x0, 0x3, 0x800, 0x7, 0x6, 0x2, 0x9, 0x7, 0x6, 0x8000, 0x36, 0x5, 0x2, 0x4, 0x6, 0x8001, 0x1, 0x98a0, 0x8d80, 0x1f, 0x3f, 0x2, 0x4, 0x3, 0xffff, 0x5, 0x81, 0x8, 0x7, 0x0, 0xff, 0x80, 0x1, 0x8f3, 0x2, 0xe2e0, 0x3, 0x9, 0xf88, 0x0, 0xc850, 0x2, 0xb6e, 0x1, 0x8, 0x547e, 0x6ac236db, 0x1, 0x2c8d, 0x1, 0x2, 0x4, 0x8, 0x6, 0x6, 0x100, 0x0, 0xfffffffe, 0xa1, 0x6, 0x10000, 0xa302, 0x80000001, 0x7, 0x0, 0x0, 0x6a, 0x6, 0x7, 0x3, 0x9, 0x0, 0x8, 0x2, 0xffff80bd, 0x401, 0x3f, 0x7ff, 0x1bd8, 0x1, 0x6, 0xb1, 0x3, 0x3, 0x200, 0x2, 0x1ff, 0xe933, 0x4, 0x7fffffff, 0x3, 0x0, 0x7fff, 0x40, 0x5, 0x5, 0x2, 0x7ff, 0x80, 0x7, 0x3aa1, 0x2, 0x8, 0x8, 0x1000, 0x5, 0x3, 0x0, 0x8f8, 0x80, 0x9bf9, 0x71, 0x6, 0x21, 0xb07, 0x0, 0x3f, 0x81, 0x8001, 0xffffffff, 0xfff, 0xba16, 0x8, 0x1f6, 0x9, 0xa, 0x0, 0x3, 0x4, 0x2, 0xffff0001, 0xffff, 0x3, 0x0, 0x5, 0x14, 0xc, 0x66c6, 0x7fffffff, 0xffffff78, 0x0, 0x9, 0x9, 0x40, 0x4, 0x7533, 0x80000000, 0x2, 0xa32, 0x5, 0x40, 0x81, 0x7fff, 0x2, 0xfffffffc, 0x8, 0x9, 0x7, 0x5, 0x8d, 0x80000000, 0xda, 0x80000001, 0x2, 0x2, 0x80, 0x6, 0xffffff00, 0x1, 0x7fff, 0x4, 0x4, 0x2, 0x10001, 0x0, 0x7fff, 0x1000, 0x1, 0x81, 0x7ff, 0xa88fe5b, 0x5, 0xffffff80, 0x400, 0x6, 0x6, 0x2, 0x8, 0xbfa0, 0x1000, 0x9, 0xffff, 0x8, 0x0, 0x8, 0x6, 0x3, 0x4, 0x1, 0x1f, 0x10001, 0x8000, 0xfffffb70, 0x1, 0x2, 0x7, 0x3, 0x2, 0x80000000, 0x4, 0x29f0, 0x1ff, 0x1ff, 0x46af0591, 0x68a954a, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x3, 0xffffda6d, 0x3, 0x7, 0x3, 0x3, 0x8c7d, 0x40, 0xea, 0x8, 0x9, 0x8, 0x2, 0x5, 0x2, 0x1, 0xffffffff, 0x10000, 0x0, 0x80, 0x7, 0x50, 0xfffffffb, 0x3, 0x1, 0x3f, 0x4, 0x1, 0x8000, 0xffff6417, 0x80, 0x1, 0x9bc, 0x3, 0x0, 0x20, 0x4, 0x8000, 0xf3, 0x10000, 0xa24c, 0x1, 0x20, 0x1ff, 0x40, 0x1, 0x0, 0x4, 0xd90, 0xac, 0x4, 0x5b, 0x7fffffff, 0x400, 0x101, 0x8, 0x101, 0x472, 0x6, 0x1, 0x1, 0x3, 0x0, 0x3, 0x40, 0x3, 0x1, 0x200, 0x3, 0x5, 0x1, 0x4, 0x395a, 0xd1b9, 0x1, 0x5, 0x3ff, 0x5, 0x2, 0x4, 0x4, 0x7, 0x3, 0x40, 0x3ff, 0x401, 0x1, 0x0, 0x9, 0x7fff, 0x0, 0x0, 0x80000000, 0x8, 0x80, 0x2, 0xfffffff8, 0x9, 0xffffff01, 0x4, 0x7, 0x8, 0x0, 0x20, 0x5e21, 0xffffffff, 0x4, 0x1f, 0x100, 0x248, 0x1ff, 0x8, 0x6fc, 0x8, 0x8, 0x3f, 0xff, 0x5, 0xffff, 0x7fff, 0x7, 0x9, 0x14, 0x7fffffff, 0xffffffff, 0x0, 0x81, 0x2, 0x7f, 0x1, 0xfff, 0x4, 0x7, 0x4, 0x2, 0x5, 0x10000, 0x6b18d17f, 0x6a3, 0xc48, 0x4, 0x2, 0x0, 0x4, 0x5, 0x1f, 0x6, 0x1ff, 0x12, 0x2, 0x5, 0x1f, 0x3d, 0xffff7fff, 0x7, 0x1, 0x1ff, 0x0, 0x6, 0x5, 0x8000, 0x5, 0xfffffffa, 0x6, 0xc17, 0x7ff, 0x80000000, 0x0, 0xe3f, 0x9, 0x62, 0x3, 0x4, 0x3ff, 0x2a19, 0x1, 0x5, 0x8000, 0x78, 0x226, 0x8, 0x1, 0xfffffffa, 0x400, 0x7, 0x3, 0x8, 0x1, 0x8, 0xa3f, 0x0, 0x4fc, 0x101, 0x6, 0x1, 0x6, 0x2, 0x1, 0x7ff, 0x8, 0x80000000, 0x1, 0x1, 0x1, 0x5, 0x4, 0x5, 0x8, 0x7, 0xfff, 0xde94, 0xf6c, 0x347, 0x9, 0x1, 0x3, 0x10000, 0x9, 0x8000, 0x8, 0x3, 0xfffffbff, 0x80000000, 0x1, 0x8001, 0x5, 0x1, 0x9, 0x9, 0x7, 0x2, 0x2, 0x6, 0x5, 0x3f, 0x3, 0xfff, 0x9, 0x0, 0xc195, 0x3, 0x5, 0x1, 0x500e, 0x4, 0x3, 0xff, 0xffff, 0x7, 0x1, 0x4, 0x8, 0x100, 0x65, 0x3, 0x7ff, 0x64e, 0x40, 0x0, 0x10001, 0x7fffffff, 0x7, 0xda3, 0x4, 0x376d7044, 0xf2a2, 0x1000, 0xff, 0x1, 0x8, 0x6, 0x7f, 0x8, 0x3f, 0x0, 0x57, 0x1, 0x7, 0x4, 0x7, 0x7, 0xfff, 0x8, 0x5bcf, 0x3ff, 0x300, 0x40000000, 0x1522, 0x100, 0x9, 0xfffffffb, 0x3ff, 0x30b, 0x6, 0xfff, 0x2, 0x39fa, 0x6, 0x3, 0x8, 0x7, 0x7, 0x5, 0x6, 0x80, 0x3, 0x1ff, 0x6, 0x7, 0xffffffff, 0x4, 0x4, 0xffffff80, 0x3, 0x9, 0xff, 0x6a, 0x8, 0x29, 0x1, 0x6, 0x2, 0x9, 0x6, 0x7, 0xffff, 0x80, 0xfff, 0xffe00000, 0x80000001, 0x10001, 0x1ff, 0xfff, 0xfff, 0x0, 0x7fffffff, 0x800, 0x9, 0x1, 0xfffffffb, 0x80000000, 0x2, 0x646, 0x3, 0x0, 0x3, 0x7, 0x6, 0x1, 0x1, 0x54aa, 0xfffffff7, 0x6, 0x80000001, 0x1, 0x0, 0x1, 0x9, 0x5849, 0x1f, 0x97af, 0x0, 0x60, 0x4, 0x8, 0x4, 0x9, 0x6, 0xfffffa03, 0x800, 0x5fbeaa1a, 0x80000001, 0x0, 0xfffffffd, 0x4, 0x101, 0xdd3f, 0x6, 0x6, 0x483, 0x6, 0x9, 0x9, 0xfff, 0x1, 0x0, 0x6, 0x7, 0x2, 0x4, 0x0, 0x20, 0x60, 0xaaa, 0x9, 0x40, 0x10000, 0x0, 0xf0000000, 0x7fffffff, 0x5, 0x101, 0x6, 0x7ff, 0x101, 0x9798, 0x2, 0x7fff, 0x10001, 0x8001, 0x4, 0x7, 0x18, 0x8, 0xd95a, 0x4, 0x7, 0x8, 0xb282, 0x1, 0x0, 0x6, 0x4, 0xb3f, 0x380, 0x8000, 0x3, 0x0, 0xb03, 0x0, 0x80000000, 0x8001, 0x2, 0x0, 0x7f, 0x6, 0x4, 0x2, 0x5, 0xc7, 0x1f, 0x0, 0x81, 0xffffffff, 0x80000000, 0x9, 0xffffffff, 0x80000000, 0x7fffffff, 0x4, 0x20, 0xcf0, 0xe80c, 0x8, 0x6, 0x1000, 0x78, 0x4, 0x5, 0x6, 0xc67, 0x9, 0x81, 0x5, 0x5, 0xf4, 0x977b, 0x3ff, 0x9, 0x8000, 0xff, 0x5, 0xded5, 0x3, 0x800, 0x3, 0x1, 0x4, 0x4, 0xc9c, 0x7, 0x7fd, 0xa4a1, 0x3, 0x6, 0x2, 0x5c, 0x7, 0x2, 0x2, 0x10000, 0x400, 0x800, 0x8, 0x0, 0x1, 0x80000, 0x7, 0x478, 0x100, 0x1f, 0x8, 0x6, 0xff, 0x1, 0xffff, 0x1, 0x7, 0x403a, 0x3ff, 0xffff, 0x81, 0xe0, 0x8, 0x1000, 0x8, 0x831f, 0x9046, 0x6, 0x40, 0x5cfc, 0xfffffff8, 0x9, 0x9dc, 0x3, 0x7fffffff, 0x80, 0x7, 0x1, 0x4486, 0x1, 0x5, 0x8, 0x1ff, 0x1, 0x9, 0x8, 0x2, 0x7ff, 0x26, 0x0, 0x4ff5, 0x40, 0x7, 0x8, 0x8, 0x1ff, 0x7, 0x4, 0x1f, 0x1000, 0x590, 0x3, 0x81, 0xffff, 0x4, 0x2, 0xc9d1, 0x0, 0x2, 0x7fffffff, 0x8, 0x6, 0x6, 0x5, 0x8bdd, 0x6, 0x101, 0x6c325de4, 0x4, 0x7f, 0xfffffff7, 0x4, 0x200, 0x40, 0x3f, 0x6, 0x101, 0x2, 0x401, 0xfc0000, 0x3, 0x74, 0x7, 0xffff845a, 0x38000000, 0x7, 0xffffff92, 0x4, 0x0, 0x2, 0x400bcb26, 0x100, 0x1, 0x3, 0x1, 0x5f63, 0x1, 0x2, 0x80000001, 0x6, 0xff, 0x1000, 0x40, 0x3b, 0x9, 0x8, 0x87f4, 0x3, 0xd34, 0x20, 0xfffffffc, 0x1f, 0x3ff, 0x0, 0x7, 0x3, 0x6, 0xbfd, 0xfffffe01, 0x49536275, 0x7fffffff, 0x4, 0xb9e, 0x1, 0x3, 0x1, 0x89a, 0xfffffffd, 0x13, 0x1, 0x9958, 0x2, 0x5, 0x81, 0x5, 0x3, 0x40, 0x41, 0x2, 0x1, 0x9, 0x1, 0x5f, 0x23, 0x20, 0x8, 0x15d, 0xff, 0x6, 0x7f, 0x7, 0x8, 0x8000, 0x80000001, 0x0, 0x2, 0x3f, 0x1369, 0x1, 0x2, 0x9, 0x401, 0x7f, 0x6, 0x8, 0x1, 0xa92, 0x10a, 0x1, 0x0, 0x14000, 0x2, 0x1, 0x10000, 0x0, 0xfffffff7, 0x2, 0x5, 0xdbcc, 0x9, 0x5, 0x4, 0x2, 0x4, 0x2, 0x2, 0xfffffffc, 0x20, 0x6, 0x1, 0x2, 0x5, 0x7fffffff, 0x5, 0x4dba, 0x2, 0x4, 0x3, 0x7, 0xc1, 0x8, 0x97, 0xfffffff7, 0x7fffffff, 0x0, 0x100, 0x5, 0x8, 0x4, 0x2, 0x1000, 0x3, 0x100, 0xef7d, 0x9, 0x9, 0x8000, 0x400, 0x7f, 0xffffffff, 0xe4, 0x3, 0x200, 0x80, 0x7ff, 0x4, 0x32, 0x8, 0x5, 0x8001, 0xffff8000, 0x400, 0x0, 0x8, 0x83, 0x8, 0x3ff, 0x8000, 0x1, 0xffff, 0x6, 0x52, 0x658]}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000001840)=0x3) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x804) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x24, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x24, r0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) [ 2378.941969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2378.965119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:01:21 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) accept$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040054) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@local, @in=@multicast2}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000ac0)=0xe8) 23:01:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) 23:01:21 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) accept$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040054) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@local, @in=@multicast2}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000ac0)=0xe8) 23:01:21 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}}, 0x4) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r1 = syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) r2 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x8, 0x200) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000800)={{0x1, 0x3, 0x4, 0x2, 0x2, 0x2}, 0xb2, [0x0, 0xe6, 0xffffffc0, 0x6164, 0x0, 0x4, 0x8, 0x8001, 0xebf8, 0x8, 0x4, 0xffffffff, 0x0, 0x1, 0x3, 0x3, 0x1000, 0x5, 0x0, 0x2000, 0x44, 0x1dac, 0x7, 0x7, 0x1, 0xc30, 0x1f, 0x8b16, 0x4, 0x4, 0x1fd, 0x1, 0x3, 0xd0, 0x3, 0x3, 0x2, 0x4, 0x3, 0x1000, 0x6, 0x2, 0x9f8, 0x9, 0x81, 0x43e, 0x3, 0x81, 0x2, 0x8, 0x1, 0x8000, 0x2, 0x6, 0x3, 0x4, 0x9, 0xfaac, 0x1, 0x9, 0x0, 0x3, 0x800, 0x7, 0x6, 0x2, 0x9, 0x7, 0x6, 0x8000, 0x36, 0x5, 0x2, 0x4, 0x6, 0x8001, 0x1, 0x98a0, 0x8d80, 0x1f, 0x3f, 0x2, 0x4, 0x3, 0xffff, 0x5, 0x81, 0x8, 0x7, 0x0, 0xff, 0x80, 0x1, 0x8f3, 0x2, 0xe2e0, 0x3, 0x9, 0xf88, 0x0, 0xc850, 0x2, 0xb6e, 0x1, 0x8, 0x547e, 0x6ac236db, 0x1, 0x2c8d, 0x1, 0x2, 0x4, 0x8, 0x6, 0x6, 0x100, 0x0, 0xfffffffe, 0xa1, 0x6, 0x10000, 0xa302, 0x80000001, 0x7, 0x0, 0x0, 0x6a, 0x6, 0x7, 0x3, 0x9, 0x0, 0x8, 0x2, 0xffff80bd, 0x401, 0x3f, 0x7ff, 0x1bd8, 0x1, 0x6, 0xb1, 0x3, 0x3, 0x200, 0x2, 0x1ff, 0xe933, 0x4, 0x7fffffff, 0x3, 0x0, 0x7fff, 0x40, 0x5, 0x5, 0x2, 0x7ff, 0x80, 0x7, 0x3aa1, 0x2, 0x8, 0x8, 0x1000, 0x5, 0x3, 0x0, 0x8f8, 0x80, 0x9bf9, 0x71, 0x6, 0x21, 0xb07, 0x0, 0x3f, 0x81, 0x8001, 0xffffffff, 0xfff, 0xba16, 0x8, 0x1f6, 0x9, 0xa, 0x0, 0x3, 0x4, 0x2, 0xffff0001, 0xffff, 0x3, 0x0, 0x5, 0x14, 0xc, 0x66c6, 0x7fffffff, 0xffffff78, 0x0, 0x9, 0x9, 0x40, 0x4, 0x7533, 0x80000000, 0x2, 0xa32, 0x5, 0x40, 0x81, 0x7fff, 0x2, 0xfffffffc, 0x8, 0x9, 0x7, 0x5, 0x8d, 0x80000000, 0xda, 0x80000001, 0x2, 0x2, 0x80, 0x6, 0xffffff00, 0x1, 0x7fff, 0x4, 0x4, 0x2, 0x10001, 0x0, 0x7fff, 0x1000, 0x1, 0x81, 0x7ff, 0xa88fe5b, 0x5, 0xffffff80, 0x400, 0x6, 0x6, 0x2, 0x8, 0xbfa0, 0x1000, 0x9, 0xffff, 0x8, 0x0, 0x8, 0x6, 0x3, 0x4, 0x1, 0x1f, 0x10001, 0x8000, 0xfffffb70, 0x1, 0x2, 0x7, 0x3, 0x2, 0x80000000, 0x4, 0x29f0, 0x1ff, 0x1ff, 0x46af0591, 0x68a954a, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x3, 0xffffda6d, 0x3, 0x7, 0x3, 0x3, 0x8c7d, 0x40, 0xea, 0x8, 0x9, 0x8, 0x2, 0x5, 0x2, 0x1, 0xffffffff, 0x10000, 0x0, 0x80, 0x7, 0x50, 0xfffffffb, 0x3, 0x1, 0x3f, 0x4, 0x1, 0x8000, 0xffff6417, 0x80, 0x1, 0x9bc, 0x3, 0x0, 0x20, 0x4, 0x8000, 0xf3, 0x10000, 0xa24c, 0x1, 0x20, 0x1ff, 0x40, 0x1, 0x0, 0x4, 0xd90, 0xac, 0x4, 0x5b, 0x7fffffff, 0x400, 0x101, 0x8, 0x101, 0x472, 0x6, 0x1, 0x1, 0x3, 0x0, 0x3, 0x40, 0x3, 0x1, 0x200, 0x3, 0x5, 0x1, 0x4, 0x395a, 0xd1b9, 0x1, 0x5, 0x3ff, 0x5, 0x2, 0x4, 0x4, 0x7, 0x3, 0x40, 0x3ff, 0x401, 0x1, 0x0, 0x9, 0x7fff, 0x0, 0x0, 0x80000000, 0x8, 0x80, 0x2, 0xfffffff8, 0x9, 0xffffff01, 0x4, 0x7, 0x8, 0x0, 0x20, 0x5e21, 0xffffffff, 0x4, 0x1f, 0x100, 0x248, 0x1ff, 0x8, 0x6fc, 0x8, 0x8, 0x3f, 0xff, 0x5, 0xffff, 0x7fff, 0x7, 0x9, 0x14, 0x7fffffff, 0xffffffff, 0x0, 0x81, 0x2, 0x7f, 0x1, 0xfff, 0x4, 0x7, 0x4, 0x2, 0x5, 0x10000, 0x6b18d17f, 0x6a3, 0xc48, 0x4, 0x2, 0x0, 0x4, 0x5, 0x1f, 0x6, 0x1ff, 0x12, 0x2, 0x5, 0x1f, 0x3d, 0xffff7fff, 0x7, 0x1, 0x1ff, 0x0, 0x6, 0x5, 0x8000, 0x5, 0xfffffffa, 0x6, 0xc17, 0x7ff, 0x80000000, 0x0, 0xe3f, 0x9, 0x62, 0x3, 0x4, 0x3ff, 0x2a19, 0x1, 0x5, 0x8000, 0x78, 0x226, 0x8, 0x1, 0xfffffffa, 0x400, 0x7, 0x3, 0x8, 0x1, 0x8, 0xa3f, 0x0, 0x4fc, 0x101, 0x6, 0x1, 0x6, 0x2, 0x1, 0x7ff, 0x8, 0x80000000, 0x1, 0x1, 0x1, 0x5, 0x4, 0x5, 0x8, 0x7, 0xfff, 0xde94, 0xf6c, 0x347, 0x9, 0x1, 0x3, 0x10000, 0x9, 0x8000, 0x8, 0x3, 0xfffffbff, 0x80000000, 0x1, 0x8001, 0x5, 0x1, 0x9, 0x9, 0x7, 0x2, 0x2, 0x6, 0x5, 0x3f, 0x3, 0xfff, 0x9, 0x0, 0xc195, 0x3, 0x5, 0x1, 0x500e, 0x4, 0x3, 0xff, 0xffff, 0x7, 0x1, 0x4, 0x8, 0x100, 0x65, 0x3, 0x7ff, 0x64e, 0x40, 0x0, 0x10001, 0x7fffffff, 0x7, 0xda3, 0x4, 0x376d7044, 0xf2a2, 0x1000, 0xff, 0x1, 0x8, 0x6, 0x7f, 0x8, 0x3f, 0x0, 0x57, 0x1, 0x7, 0x4, 0x7, 0x7, 0xfff, 0x8, 0x5bcf, 0x3ff, 0x300, 0x40000000, 0x1522, 0x100, 0x9, 0xfffffffb, 0x3ff, 0x30b, 0x6, 0xfff, 0x2, 0x39fa, 0x6, 0x3, 0x8, 0x7, 0x7, 0x5, 0x6, 0x80, 0x3, 0x1ff, 0x6, 0x7, 0xffffffff, 0x4, 0x4, 0xffffff80, 0x3, 0x9, 0xff, 0x6a, 0x8, 0x29, 0x1, 0x6, 0x2, 0x9, 0x6, 0x7, 0xffff, 0x80, 0xfff, 0xffe00000, 0x80000001, 0x10001, 0x1ff, 0xfff, 0xfff, 0x0, 0x7fffffff, 0x800, 0x9, 0x1, 0xfffffffb, 0x80000000, 0x2, 0x646, 0x3, 0x0, 0x3, 0x7, 0x6, 0x1, 0x1, 0x54aa, 0xfffffff7, 0x6, 0x80000001, 0x1, 0x0, 0x1, 0x9, 0x5849, 0x1f, 0x97af, 0x0, 0x60, 0x4, 0x8, 0x4, 0x9, 0x6, 0xfffffa03, 0x800, 0x5fbeaa1a, 0x80000001, 0x0, 0xfffffffd, 0x4, 0x101, 0xdd3f, 0x6, 0x6, 0x483, 0x6, 0x9, 0x9, 0xfff, 0x1, 0x0, 0x6, 0x7, 0x2, 0x4, 0x0, 0x20, 0x60, 0xaaa, 0x9, 0x40, 0x10000, 0x0, 0xf0000000, 0x7fffffff, 0x5, 0x101, 0x6, 0x7ff, 0x101, 0x9798, 0x2, 0x7fff, 0x10001, 0x8001, 0x4, 0x7, 0x18, 0x8, 0xd95a, 0x4, 0x7, 0x8, 0xb282, 0x1, 0x0, 0x6, 0x4, 0xb3f, 0x380, 0x8000, 0x3, 0x0, 0xb03, 0x0, 0x80000000, 0x8001, 0x2, 0x0, 0x7f, 0x6, 0x4, 0x2, 0x5, 0xc7, 0x1f, 0x0, 0x81, 0xffffffff, 0x80000000, 0x9, 0xffffffff, 0x80000000, 0x7fffffff, 0x4, 0x20, 0xcf0, 0xe80c, 0x8, 0x6, 0x1000, 0x78, 0x4, 0x5, 0x6, 0xc67, 0x9, 0x81, 0x5, 0x5, 0xf4, 0x977b, 0x3ff, 0x9, 0x8000, 0xff, 0x5, 0xded5, 0x3, 0x800, 0x3, 0x1, 0x4, 0x4, 0xc9c, 0x7, 0x7fd, 0xa4a1, 0x3, 0x6, 0x2, 0x5c, 0x7, 0x2, 0x2, 0x10000, 0x400, 0x800, 0x8, 0x0, 0x1, 0x80000, 0x7, 0x478, 0x100, 0x1f, 0x8, 0x6, 0xff, 0x1, 0xffff, 0x1, 0x7, 0x403a, 0x3ff, 0xffff, 0x81, 0xe0, 0x8, 0x1000, 0x8, 0x831f, 0x9046, 0x6, 0x40, 0x5cfc, 0xfffffff8, 0x9, 0x9dc, 0x3, 0x7fffffff, 0x80, 0x7, 0x1, 0x4486, 0x1, 0x5, 0x8, 0x1ff, 0x1, 0x9, 0x8, 0x2, 0x7ff, 0x26, 0x0, 0x4ff5, 0x40, 0x7, 0x8, 0x8, 0x1ff, 0x7, 0x4, 0x1f, 0x1000, 0x590, 0x3, 0x81, 0xffff, 0x4, 0x2, 0xc9d1, 0x0, 0x2, 0x7fffffff, 0x8, 0x6, 0x6, 0x5, 0x8bdd, 0x6, 0x101, 0x6c325de4, 0x4, 0x7f, 0xfffffff7, 0x4, 0x200, 0x40, 0x3f, 0x6, 0x101, 0x2, 0x401, 0xfc0000, 0x3, 0x74, 0x7, 0xffff845a, 0x38000000, 0x7, 0xffffff92, 0x4, 0x0, 0x2, 0x400bcb26, 0x100, 0x1, 0x3, 0x1, 0x5f63, 0x1, 0x2, 0x80000001, 0x6, 0xff, 0x1000, 0x40, 0x3b, 0x9, 0x8, 0x87f4, 0x3, 0xd34, 0x20, 0xfffffffc, 0x1f, 0x3ff, 0x0, 0x7, 0x3, 0x6, 0xbfd, 0xfffffe01, 0x49536275, 0x7fffffff, 0x4, 0xb9e, 0x1, 0x3, 0x1, 0x89a, 0xfffffffd, 0x13, 0x1, 0x9958, 0x2, 0x5, 0x81, 0x5, 0x3, 0x40, 0x41, 0x2, 0x1, 0x9, 0x1, 0x5f, 0x23, 0x20, 0x8, 0x15d, 0xff, 0x6, 0x7f, 0x7, 0x8, 0x8000, 0x80000001, 0x0, 0x2, 0x3f, 0x1369, 0x1, 0x2, 0x9, 0x401, 0x7f, 0x6, 0x8, 0x1, 0xa92, 0x10a, 0x1, 0x0, 0x14000, 0x2, 0x1, 0x10000, 0x0, 0xfffffff7, 0x2, 0x5, 0xdbcc, 0x9, 0x5, 0x4, 0x2, 0x4, 0x2, 0x2, 0xfffffffc, 0x20, 0x6, 0x1, 0x2, 0x5, 0x7fffffff, 0x5, 0x4dba, 0x2, 0x4, 0x3, 0x7, 0xc1, 0x8, 0x97, 0xfffffff7, 0x7fffffff, 0x0, 0x100, 0x5, 0x8, 0x4, 0x2, 0x1000, 0x3, 0x100, 0xef7d, 0x9, 0x9, 0x8000, 0x400, 0x7f, 0xffffffff, 0xe4, 0x3, 0x200, 0x80, 0x7ff, 0x4, 0x32, 0x8, 0x5, 0x8001, 0xffff8000, 0x400, 0x0, 0x8, 0x83, 0x8, 0x3ff, 0x8000, 0x1, 0xffff, 0x6, 0x52, 0x658]}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000001840)=0x3) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x804) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x24, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) memfd_secret(0x0) 23:01:21 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'}) 23:01:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) 23:01:21 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x4090) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f00000007c0)={{0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, {0xa, 0x4e21, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}, 0x7, [0x5, 0x7, 0x2, 0xff, 0x50e5, 0x80000000, 0x6, 0x7373]}, 0x5c) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r9, 0x306, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1515bb0623a04b7a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004000) 23:01:21 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) accept$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040054) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@local, @in=@multicast2}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000ac0)=0xe8) 23:01:21 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}}, 0x4) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r1 = syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) r2 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x8, 0x200) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000800)={{0x1, 0x3, 0x4, 0x2, 0x2, 0x2}, 0xb2, [0x0, 0xe6, 0xffffffc0, 0x6164, 0x0, 0x4, 0x8, 0x8001, 0xebf8, 0x8, 0x4, 0xffffffff, 0x0, 0x1, 0x3, 0x3, 0x1000, 0x5, 0x0, 0x2000, 0x44, 0x1dac, 0x7, 0x7, 0x1, 0xc30, 0x1f, 0x8b16, 0x4, 0x4, 0x1fd, 0x1, 0x3, 0xd0, 0x3, 0x3, 0x2, 0x4, 0x3, 0x1000, 0x6, 0x2, 0x9f8, 0x9, 0x81, 0x43e, 0x3, 0x81, 0x2, 0x8, 0x1, 0x8000, 0x2, 0x6, 0x3, 0x4, 0x9, 0xfaac, 0x1, 0x9, 0x0, 0x3, 0x800, 0x7, 0x6, 0x2, 0x9, 0x7, 0x6, 0x8000, 0x36, 0x5, 0x2, 0x4, 0x6, 0x8001, 0x1, 0x98a0, 0x8d80, 0x1f, 0x3f, 0x2, 0x4, 0x3, 0xffff, 0x5, 0x81, 0x8, 0x7, 0x0, 0xff, 0x80, 0x1, 0x8f3, 0x2, 0xe2e0, 0x3, 0x9, 0xf88, 0x0, 0xc850, 0x2, 0xb6e, 0x1, 0x8, 0x547e, 0x6ac236db, 0x1, 0x2c8d, 0x1, 0x2, 0x4, 0x8, 0x6, 0x6, 0x100, 0x0, 0xfffffffe, 0xa1, 0x6, 0x10000, 0xa302, 0x80000001, 0x7, 0x0, 0x0, 0x6a, 0x6, 0x7, 0x3, 0x9, 0x0, 0x8, 0x2, 0xffff80bd, 0x401, 0x3f, 0x7ff, 0x1bd8, 0x1, 0x6, 0xb1, 0x3, 0x3, 0x200, 0x2, 0x1ff, 0xe933, 0x4, 0x7fffffff, 0x3, 0x0, 0x7fff, 0x40, 0x5, 0x5, 0x2, 0x7ff, 0x80, 0x7, 0x3aa1, 0x2, 0x8, 0x8, 0x1000, 0x5, 0x3, 0x0, 0x8f8, 0x80, 0x9bf9, 0x71, 0x6, 0x21, 0xb07, 0x0, 0x3f, 0x81, 0x8001, 0xffffffff, 0xfff, 0xba16, 0x8, 0x1f6, 0x9, 0xa, 0x0, 0x3, 0x4, 0x2, 0xffff0001, 0xffff, 0x3, 0x0, 0x5, 0x14, 0xc, 0x66c6, 0x7fffffff, 0xffffff78, 0x0, 0x9, 0x9, 0x40, 0x4, 0x7533, 0x80000000, 0x2, 0xa32, 0x5, 0x40, 0x81, 0x7fff, 0x2, 0xfffffffc, 0x8, 0x9, 0x7, 0x5, 0x8d, 0x80000000, 0xda, 0x80000001, 0x2, 0x2, 0x80, 0x6, 0xffffff00, 0x1, 0x7fff, 0x4, 0x4, 0x2, 0x10001, 0x0, 0x7fff, 0x1000, 0x1, 0x81, 0x7ff, 0xa88fe5b, 0x5, 0xffffff80, 0x400, 0x6, 0x6, 0x2, 0x8, 0xbfa0, 0x1000, 0x9, 0xffff, 0x8, 0x0, 0x8, 0x6, 0x3, 0x4, 0x1, 0x1f, 0x10001, 0x8000, 0xfffffb70, 0x1, 0x2, 0x7, 0x3, 0x2, 0x80000000, 0x4, 0x29f0, 0x1ff, 0x1ff, 0x46af0591, 0x68a954a, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x3, 0xffffda6d, 0x3, 0x7, 0x3, 0x3, 0x8c7d, 0x40, 0xea, 0x8, 0x9, 0x8, 0x2, 0x5, 0x2, 0x1, 0xffffffff, 0x10000, 0x0, 0x80, 0x7, 0x50, 0xfffffffb, 0x3, 0x1, 0x3f, 0x4, 0x1, 0x8000, 0xffff6417, 0x80, 0x1, 0x9bc, 0x3, 0x0, 0x20, 0x4, 0x8000, 0xf3, 0x10000, 0xa24c, 0x1, 0x20, 0x1ff, 0x40, 0x1, 0x0, 0x4, 0xd90, 0xac, 0x4, 0x5b, 0x7fffffff, 0x400, 0x101, 0x8, 0x101, 0x472, 0x6, 0x1, 0x1, 0x3, 0x0, 0x3, 0x40, 0x3, 0x1, 0x200, 0x3, 0x5, 0x1, 0x4, 0x395a, 0xd1b9, 0x1, 0x5, 0x3ff, 0x5, 0x2, 0x4, 0x4, 0x7, 0x3, 0x40, 0x3ff, 0x401, 0x1, 0x0, 0x9, 0x7fff, 0x0, 0x0, 0x80000000, 0x8, 0x80, 0x2, 0xfffffff8, 0x9, 0xffffff01, 0x4, 0x7, 0x8, 0x0, 0x20, 0x5e21, 0xffffffff, 0x4, 0x1f, 0x100, 0x248, 0x1ff, 0x8, 0x6fc, 0x8, 0x8, 0x3f, 0xff, 0x5, 0xffff, 0x7fff, 0x7, 0x9, 0x14, 0x7fffffff, 0xffffffff, 0x0, 0x81, 0x2, 0x7f, 0x1, 0xfff, 0x4, 0x7, 0x4, 0x2, 0x5, 0x10000, 0x6b18d17f, 0x6a3, 0xc48, 0x4, 0x2, 0x0, 0x4, 0x5, 0x1f, 0x6, 0x1ff, 0x12, 0x2, 0x5, 0x1f, 0x3d, 0xffff7fff, 0x7, 0x1, 0x1ff, 0x0, 0x6, 0x5, 0x8000, 0x5, 0xfffffffa, 0x6, 0xc17, 0x7ff, 0x80000000, 0x0, 0xe3f, 0x9, 0x62, 0x3, 0x4, 0x3ff, 0x2a19, 0x1, 0x5, 0x8000, 0x78, 0x226, 0x8, 0x1, 0xfffffffa, 0x400, 0x7, 0x3, 0x8, 0x1, 0x8, 0xa3f, 0x0, 0x4fc, 0x101, 0x6, 0x1, 0x6, 0x2, 0x1, 0x7ff, 0x8, 0x80000000, 0x1, 0x1, 0x1, 0x5, 0x4, 0x5, 0x8, 0x7, 0xfff, 0xde94, 0xf6c, 0x347, 0x9, 0x1, 0x3, 0x10000, 0x9, 0x8000, 0x8, 0x3, 0xfffffbff, 0x80000000, 0x1, 0x8001, 0x5, 0x1, 0x9, 0x9, 0x7, 0x2, 0x2, 0x6, 0x5, 0x3f, 0x3, 0xfff, 0x9, 0x0, 0xc195, 0x3, 0x5, 0x1, 0x500e, 0x4, 0x3, 0xff, 0xffff, 0x7, 0x1, 0x4, 0x8, 0x100, 0x65, 0x3, 0x7ff, 0x64e, 0x40, 0x0, 0x10001, 0x7fffffff, 0x7, 0xda3, 0x4, 0x376d7044, 0xf2a2, 0x1000, 0xff, 0x1, 0x8, 0x6, 0x7f, 0x8, 0x3f, 0x0, 0x57, 0x1, 0x7, 0x4, 0x7, 0x7, 0xfff, 0x8, 0x5bcf, 0x3ff, 0x300, 0x40000000, 0x1522, 0x100, 0x9, 0xfffffffb, 0x3ff, 0x30b, 0x6, 0xfff, 0x2, 0x39fa, 0x6, 0x3, 0x8, 0x7, 0x7, 0x5, 0x6, 0x80, 0x3, 0x1ff, 0x6, 0x7, 0xffffffff, 0x4, 0x4, 0xffffff80, 0x3, 0x9, 0xff, 0x6a, 0x8, 0x29, 0x1, 0x6, 0x2, 0x9, 0x6, 0x7, 0xffff, 0x80, 0xfff, 0xffe00000, 0x80000001, 0x10001, 0x1ff, 0xfff, 0xfff, 0x0, 0x7fffffff, 0x800, 0x9, 0x1, 0xfffffffb, 0x80000000, 0x2, 0x646, 0x3, 0x0, 0x3, 0x7, 0x6, 0x1, 0x1, 0x54aa, 0xfffffff7, 0x6, 0x80000001, 0x1, 0x0, 0x1, 0x9, 0x5849, 0x1f, 0x97af, 0x0, 0x60, 0x4, 0x8, 0x4, 0x9, 0x6, 0xfffffa03, 0x800, 0x5fbeaa1a, 0x80000001, 0x0, 0xfffffffd, 0x4, 0x101, 0xdd3f, 0x6, 0x6, 0x483, 0x6, 0x9, 0x9, 0xfff, 0x1, 0x0, 0x6, 0x7, 0x2, 0x4, 0x0, 0x20, 0x60, 0xaaa, 0x9, 0x40, 0x10000, 0x0, 0xf0000000, 0x7fffffff, 0x5, 0x101, 0x6, 0x7ff, 0x101, 0x9798, 0x2, 0x7fff, 0x10001, 0x8001, 0x4, 0x7, 0x18, 0x8, 0xd95a, 0x4, 0x7, 0x8, 0xb282, 0x1, 0x0, 0x6, 0x4, 0xb3f, 0x380, 0x8000, 0x3, 0x0, 0xb03, 0x0, 0x80000000, 0x8001, 0x2, 0x0, 0x7f, 0x6, 0x4, 0x2, 0x5, 0xc7, 0x1f, 0x0, 0x81, 0xffffffff, 0x80000000, 0x9, 0xffffffff, 0x80000000, 0x7fffffff, 0x4, 0x20, 0xcf0, 0xe80c, 0x8, 0x6, 0x1000, 0x78, 0x4, 0x5, 0x6, 0xc67, 0x9, 0x81, 0x5, 0x5, 0xf4, 0x977b, 0x3ff, 0x9, 0x8000, 0xff, 0x5, 0xded5, 0x3, 0x800, 0x3, 0x1, 0x4, 0x4, 0xc9c, 0x7, 0x7fd, 0xa4a1, 0x3, 0x6, 0x2, 0x5c, 0x7, 0x2, 0x2, 0x10000, 0x400, 0x800, 0x8, 0x0, 0x1, 0x80000, 0x7, 0x478, 0x100, 0x1f, 0x8, 0x6, 0xff, 0x1, 0xffff, 0x1, 0x7, 0x403a, 0x3ff, 0xffff, 0x81, 0xe0, 0x8, 0x1000, 0x8, 0x831f, 0x9046, 0x6, 0x40, 0x5cfc, 0xfffffff8, 0x9, 0x9dc, 0x3, 0x7fffffff, 0x80, 0x7, 0x1, 0x4486, 0x1, 0x5, 0x8, 0x1ff, 0x1, 0x9, 0x8, 0x2, 0x7ff, 0x26, 0x0, 0x4ff5, 0x40, 0x7, 0x8, 0x8, 0x1ff, 0x7, 0x4, 0x1f, 0x1000, 0x590, 0x3, 0x81, 0xffff, 0x4, 0x2, 0xc9d1, 0x0, 0x2, 0x7fffffff, 0x8, 0x6, 0x6, 0x5, 0x8bdd, 0x6, 0x101, 0x6c325de4, 0x4, 0x7f, 0xfffffff7, 0x4, 0x200, 0x40, 0x3f, 0x6, 0x101, 0x2, 0x401, 0xfc0000, 0x3, 0x74, 0x7, 0xffff845a, 0x38000000, 0x7, 0xffffff92, 0x4, 0x0, 0x2, 0x400bcb26, 0x100, 0x1, 0x3, 0x1, 0x5f63, 0x1, 0x2, 0x80000001, 0x6, 0xff, 0x1000, 0x40, 0x3b, 0x9, 0x8, 0x87f4, 0x3, 0xd34, 0x20, 0xfffffffc, 0x1f, 0x3ff, 0x0, 0x7, 0x3, 0x6, 0xbfd, 0xfffffe01, 0x49536275, 0x7fffffff, 0x4, 0xb9e, 0x1, 0x3, 0x1, 0x89a, 0xfffffffd, 0x13, 0x1, 0x9958, 0x2, 0x5, 0x81, 0x5, 0x3, 0x40, 0x41, 0x2, 0x1, 0x9, 0x1, 0x5f, 0x23, 0x20, 0x8, 0x15d, 0xff, 0x6, 0x7f, 0x7, 0x8, 0x8000, 0x80000001, 0x0, 0x2, 0x3f, 0x1369, 0x1, 0x2, 0x9, 0x401, 0x7f, 0x6, 0x8, 0x1, 0xa92, 0x10a, 0x1, 0x0, 0x14000, 0x2, 0x1, 0x10000, 0x0, 0xfffffff7, 0x2, 0x5, 0xdbcc, 0x9, 0x5, 0x4, 0x2, 0x4, 0x2, 0x2, 0xfffffffc, 0x20, 0x6, 0x1, 0x2, 0x5, 0x7fffffff, 0x5, 0x4dba, 0x2, 0x4, 0x3, 0x7, 0xc1, 0x8, 0x97, 0xfffffff7, 0x7fffffff, 0x0, 0x100, 0x5, 0x8, 0x4, 0x2, 0x1000, 0x3, 0x100, 0xef7d, 0x9, 0x9, 0x8000, 0x400, 0x7f, 0xffffffff, 0xe4, 0x3, 0x200, 0x80, 0x7ff, 0x4, 0x32, 0x8, 0x5, 0x8001, 0xffff8000, 0x400, 0x0, 0x8, 0x83, 0x8, 0x3ff, 0x8000, 0x1, 0xffff, 0x6, 0x52, 0x658]}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000001840)=0x3) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x804) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x24, r4, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 23:01:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) 23:01:22 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) 23:01:22 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x4, [{0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) [ 2379.829394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2379.836293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:01:29 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) 23:01:29 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x4090) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f00000007c0)={{0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, {0xa, 0x4e21, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}, 0x7, [0x5, 0x7, 0x2, 0xff, 0x50e5, 0x80000000, 0x6, 0x7373]}, 0x5c) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r9, 0x306, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1515bb0623a04b7a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004000) 23:01:29 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x4, [{0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:01:29 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) accept$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040054) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@local, @in=@multicast2}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000ac0)=0xe8) 23:01:29 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}}, 0x4) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r1 = syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) r2 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x8, 0x200) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000800)={{0x1, 0x3, 0x4, 0x2, 0x2, 0x2}, 0xb2, [0x0, 0xe6, 0xffffffc0, 0x6164, 0x0, 0x4, 0x8, 0x8001, 0xebf8, 0x8, 0x4, 0xffffffff, 0x0, 0x1, 0x3, 0x3, 0x1000, 0x5, 0x0, 0x2000, 0x44, 0x1dac, 0x7, 0x7, 0x1, 0xc30, 0x1f, 0x8b16, 0x4, 0x4, 0x1fd, 0x1, 0x3, 0xd0, 0x3, 0x3, 0x2, 0x4, 0x3, 0x1000, 0x6, 0x2, 0x9f8, 0x9, 0x81, 0x43e, 0x3, 0x81, 0x2, 0x8, 0x1, 0x8000, 0x2, 0x6, 0x3, 0x4, 0x9, 0xfaac, 0x1, 0x9, 0x0, 0x3, 0x800, 0x7, 0x6, 0x2, 0x9, 0x7, 0x6, 0x8000, 0x36, 0x5, 0x2, 0x4, 0x6, 0x8001, 0x1, 0x98a0, 0x8d80, 0x1f, 0x3f, 0x2, 0x4, 0x3, 0xffff, 0x5, 0x81, 0x8, 0x7, 0x0, 0xff, 0x80, 0x1, 0x8f3, 0x2, 0xe2e0, 0x3, 0x9, 0xf88, 0x0, 0xc850, 0x2, 0xb6e, 0x1, 0x8, 0x547e, 0x6ac236db, 0x1, 0x2c8d, 0x1, 0x2, 0x4, 0x8, 0x6, 0x6, 0x100, 0x0, 0xfffffffe, 0xa1, 0x6, 0x10000, 0xa302, 0x80000001, 0x7, 0x0, 0x0, 0x6a, 0x6, 0x7, 0x3, 0x9, 0x0, 0x8, 0x2, 0xffff80bd, 0x401, 0x3f, 0x7ff, 0x1bd8, 0x1, 0x6, 0xb1, 0x3, 0x3, 0x200, 0x2, 0x1ff, 0xe933, 0x4, 0x7fffffff, 0x3, 0x0, 0x7fff, 0x40, 0x5, 0x5, 0x2, 0x7ff, 0x80, 0x7, 0x3aa1, 0x2, 0x8, 0x8, 0x1000, 0x5, 0x3, 0x0, 0x8f8, 0x80, 0x9bf9, 0x71, 0x6, 0x21, 0xb07, 0x0, 0x3f, 0x81, 0x8001, 0xffffffff, 0xfff, 0xba16, 0x8, 0x1f6, 0x9, 0xa, 0x0, 0x3, 0x4, 0x2, 0xffff0001, 0xffff, 0x3, 0x0, 0x5, 0x14, 0xc, 0x66c6, 0x7fffffff, 0xffffff78, 0x0, 0x9, 0x9, 0x40, 0x4, 0x7533, 0x80000000, 0x2, 0xa32, 0x5, 0x40, 0x81, 0x7fff, 0x2, 0xfffffffc, 0x8, 0x9, 0x7, 0x5, 0x8d, 0x80000000, 0xda, 0x80000001, 0x2, 0x2, 0x80, 0x6, 0xffffff00, 0x1, 0x7fff, 0x4, 0x4, 0x2, 0x10001, 0x0, 0x7fff, 0x1000, 0x1, 0x81, 0x7ff, 0xa88fe5b, 0x5, 0xffffff80, 0x400, 0x6, 0x6, 0x2, 0x8, 0xbfa0, 0x1000, 0x9, 0xffff, 0x8, 0x0, 0x8, 0x6, 0x3, 0x4, 0x1, 0x1f, 0x10001, 0x8000, 0xfffffb70, 0x1, 0x2, 0x7, 0x3, 0x2, 0x80000000, 0x4, 0x29f0, 0x1ff, 0x1ff, 0x46af0591, 0x68a954a, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x3, 0xffffda6d, 0x3, 0x7, 0x3, 0x3, 0x8c7d, 0x40, 0xea, 0x8, 0x9, 0x8, 0x2, 0x5, 0x2, 0x1, 0xffffffff, 0x10000, 0x0, 0x80, 0x7, 0x50, 0xfffffffb, 0x3, 0x1, 0x3f, 0x4, 0x1, 0x8000, 0xffff6417, 0x80, 0x1, 0x9bc, 0x3, 0x0, 0x20, 0x4, 0x8000, 0xf3, 0x10000, 0xa24c, 0x1, 0x20, 0x1ff, 0x40, 0x1, 0x0, 0x4, 0xd90, 0xac, 0x4, 0x5b, 0x7fffffff, 0x400, 0x101, 0x8, 0x101, 0x472, 0x6, 0x1, 0x1, 0x3, 0x0, 0x3, 0x40, 0x3, 0x1, 0x200, 0x3, 0x5, 0x1, 0x4, 0x395a, 0xd1b9, 0x1, 0x5, 0x3ff, 0x5, 0x2, 0x4, 0x4, 0x7, 0x3, 0x40, 0x3ff, 0x401, 0x1, 0x0, 0x9, 0x7fff, 0x0, 0x0, 0x80000000, 0x8, 0x80, 0x2, 0xfffffff8, 0x9, 0xffffff01, 0x4, 0x7, 0x8, 0x0, 0x20, 0x5e21, 0xffffffff, 0x4, 0x1f, 0x100, 0x248, 0x1ff, 0x8, 0x6fc, 0x8, 0x8, 0x3f, 0xff, 0x5, 0xffff, 0x7fff, 0x7, 0x9, 0x14, 0x7fffffff, 0xffffffff, 0x0, 0x81, 0x2, 0x7f, 0x1, 0xfff, 0x4, 0x7, 0x4, 0x2, 0x5, 0x10000, 0x6b18d17f, 0x6a3, 0xc48, 0x4, 0x2, 0x0, 0x4, 0x5, 0x1f, 0x6, 0x1ff, 0x12, 0x2, 0x5, 0x1f, 0x3d, 0xffff7fff, 0x7, 0x1, 0x1ff, 0x0, 0x6, 0x5, 0x8000, 0x5, 0xfffffffa, 0x6, 0xc17, 0x7ff, 0x80000000, 0x0, 0xe3f, 0x9, 0x62, 0x3, 0x4, 0x3ff, 0x2a19, 0x1, 0x5, 0x8000, 0x78, 0x226, 0x8, 0x1, 0xfffffffa, 0x400, 0x7, 0x3, 0x8, 0x1, 0x8, 0xa3f, 0x0, 0x4fc, 0x101, 0x6, 0x1, 0x6, 0x2, 0x1, 0x7ff, 0x8, 0x80000000, 0x1, 0x1, 0x1, 0x5, 0x4, 0x5, 0x8, 0x7, 0xfff, 0xde94, 0xf6c, 0x347, 0x9, 0x1, 0x3, 0x10000, 0x9, 0x8000, 0x8, 0x3, 0xfffffbff, 0x80000000, 0x1, 0x8001, 0x5, 0x1, 0x9, 0x9, 0x7, 0x2, 0x2, 0x6, 0x5, 0x3f, 0x3, 0xfff, 0x9, 0x0, 0xc195, 0x3, 0x5, 0x1, 0x500e, 0x4, 0x3, 0xff, 0xffff, 0x7, 0x1, 0x4, 0x8, 0x100, 0x65, 0x3, 0x7ff, 0x64e, 0x40, 0x0, 0x10001, 0x7fffffff, 0x7, 0xda3, 0x4, 0x376d7044, 0xf2a2, 0x1000, 0xff, 0x1, 0x8, 0x6, 0x7f, 0x8, 0x3f, 0x0, 0x57, 0x1, 0x7, 0x4, 0x7, 0x7, 0xfff, 0x8, 0x5bcf, 0x3ff, 0x300, 0x40000000, 0x1522, 0x100, 0x9, 0xfffffffb, 0x3ff, 0x30b, 0x6, 0xfff, 0x2, 0x39fa, 0x6, 0x3, 0x8, 0x7, 0x7, 0x5, 0x6, 0x80, 0x3, 0x1ff, 0x6, 0x7, 0xffffffff, 0x4, 0x4, 0xffffff80, 0x3, 0x9, 0xff, 0x6a, 0x8, 0x29, 0x1, 0x6, 0x2, 0x9, 0x6, 0x7, 0xffff, 0x80, 0xfff, 0xffe00000, 0x80000001, 0x10001, 0x1ff, 0xfff, 0xfff, 0x0, 0x7fffffff, 0x800, 0x9, 0x1, 0xfffffffb, 0x80000000, 0x2, 0x646, 0x3, 0x0, 0x3, 0x7, 0x6, 0x1, 0x1, 0x54aa, 0xfffffff7, 0x6, 0x80000001, 0x1, 0x0, 0x1, 0x9, 0x5849, 0x1f, 0x97af, 0x0, 0x60, 0x4, 0x8, 0x4, 0x9, 0x6, 0xfffffa03, 0x800, 0x5fbeaa1a, 0x80000001, 0x0, 0xfffffffd, 0x4, 0x101, 0xdd3f, 0x6, 0x6, 0x483, 0x6, 0x9, 0x9, 0xfff, 0x1, 0x0, 0x6, 0x7, 0x2, 0x4, 0x0, 0x20, 0x60, 0xaaa, 0x9, 0x40, 0x10000, 0x0, 0xf0000000, 0x7fffffff, 0x5, 0x101, 0x6, 0x7ff, 0x101, 0x9798, 0x2, 0x7fff, 0x10001, 0x8001, 0x4, 0x7, 0x18, 0x8, 0xd95a, 0x4, 0x7, 0x8, 0xb282, 0x1, 0x0, 0x6, 0x4, 0xb3f, 0x380, 0x8000, 0x3, 0x0, 0xb03, 0x0, 0x80000000, 0x8001, 0x2, 0x0, 0x7f, 0x6, 0x4, 0x2, 0x5, 0xc7, 0x1f, 0x0, 0x81, 0xffffffff, 0x80000000, 0x9, 0xffffffff, 0x80000000, 0x7fffffff, 0x4, 0x20, 0xcf0, 0xe80c, 0x8, 0x6, 0x1000, 0x78, 0x4, 0x5, 0x6, 0xc67, 0x9, 0x81, 0x5, 0x5, 0xf4, 0x977b, 0x3ff, 0x9, 0x8000, 0xff, 0x5, 0xded5, 0x3, 0x800, 0x3, 0x1, 0x4, 0x4, 0xc9c, 0x7, 0x7fd, 0xa4a1, 0x3, 0x6, 0x2, 0x5c, 0x7, 0x2, 0x2, 0x10000, 0x400, 0x800, 0x8, 0x0, 0x1, 0x80000, 0x7, 0x478, 0x100, 0x1f, 0x8, 0x6, 0xff, 0x1, 0xffff, 0x1, 0x7, 0x403a, 0x3ff, 0xffff, 0x81, 0xe0, 0x8, 0x1000, 0x8, 0x831f, 0x9046, 0x6, 0x40, 0x5cfc, 0xfffffff8, 0x9, 0x9dc, 0x3, 0x7fffffff, 0x80, 0x7, 0x1, 0x4486, 0x1, 0x5, 0x8, 0x1ff, 0x1, 0x9, 0x8, 0x2, 0x7ff, 0x26, 0x0, 0x4ff5, 0x40, 0x7, 0x8, 0x8, 0x1ff, 0x7, 0x4, 0x1f, 0x1000, 0x590, 0x3, 0x81, 0xffff, 0x4, 0x2, 0xc9d1, 0x0, 0x2, 0x7fffffff, 0x8, 0x6, 0x6, 0x5, 0x8bdd, 0x6, 0x101, 0x6c325de4, 0x4, 0x7f, 0xfffffff7, 0x4, 0x200, 0x40, 0x3f, 0x6, 0x101, 0x2, 0x401, 0xfc0000, 0x3, 0x74, 0x7, 0xffff845a, 0x38000000, 0x7, 0xffffff92, 0x4, 0x0, 0x2, 0x400bcb26, 0x100, 0x1, 0x3, 0x1, 0x5f63, 0x1, 0x2, 0x80000001, 0x6, 0xff, 0x1000, 0x40, 0x3b, 0x9, 0x8, 0x87f4, 0x3, 0xd34, 0x20, 0xfffffffc, 0x1f, 0x3ff, 0x0, 0x7, 0x3, 0x6, 0xbfd, 0xfffffe01, 0x49536275, 0x7fffffff, 0x4, 0xb9e, 0x1, 0x3, 0x1, 0x89a, 0xfffffffd, 0x13, 0x1, 0x9958, 0x2, 0x5, 0x81, 0x5, 0x3, 0x40, 0x41, 0x2, 0x1, 0x9, 0x1, 0x5f, 0x23, 0x20, 0x8, 0x15d, 0xff, 0x6, 0x7f, 0x7, 0x8, 0x8000, 0x80000001, 0x0, 0x2, 0x3f, 0x1369, 0x1, 0x2, 0x9, 0x401, 0x7f, 0x6, 0x8, 0x1, 0xa92, 0x10a, 0x1, 0x0, 0x14000, 0x2, 0x1, 0x10000, 0x0, 0xfffffff7, 0x2, 0x5, 0xdbcc, 0x9, 0x5, 0x4, 0x2, 0x4, 0x2, 0x2, 0xfffffffc, 0x20, 0x6, 0x1, 0x2, 0x5, 0x7fffffff, 0x5, 0x4dba, 0x2, 0x4, 0x3, 0x7, 0xc1, 0x8, 0x97, 0xfffffff7, 0x7fffffff, 0x0, 0x100, 0x5, 0x8, 0x4, 0x2, 0x1000, 0x3, 0x100, 0xef7d, 0x9, 0x9, 0x8000, 0x400, 0x7f, 0xffffffff, 0xe4, 0x3, 0x200, 0x80, 0x7ff, 0x4, 0x32, 0x8, 0x5, 0x8001, 0xffff8000, 0x400, 0x0, 0x8, 0x83, 0x8, 0x3ff, 0x8000, 0x1, 0xffff, 0x6, 0x52, 0x658]}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000001840)=0x3) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000019c0), 0xffffffffffffffff) 23:01:29 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) 23:01:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) 23:01:29 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) [ 2386.835754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2386.852399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:01:37 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x0, 0x0}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:01:37 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) accept$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000940)=0x1c) 23:01:37 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x4090) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f00000007c0)={{0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, {0xa, 0x4e21, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}, 0x7, [0x5, 0x7, 0x2, 0xff, 0x50e5, 0x80000000, 0x6, 0x7373]}, 0x5c) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), 0xffffffffffffffff) 23:01:37 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) accept$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040054) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 23:01:37 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) 23:01:37 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}}, 0x4) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r1 = syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) r2 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x8, 0x200) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000800)={{0x1, 0x3, 0x4, 0x2, 0x2, 0x2}, 0xb2, [0x0, 0xe6, 0xffffffc0, 0x6164, 0x0, 0x4, 0x8, 0x8001, 0xebf8, 0x8, 0x4, 0xffffffff, 0x0, 0x1, 0x3, 0x3, 0x1000, 0x5, 0x0, 0x2000, 0x44, 0x1dac, 0x7, 0x7, 0x1, 0xc30, 0x1f, 0x8b16, 0x4, 0x4, 0x1fd, 0x1, 0x3, 0xd0, 0x3, 0x3, 0x2, 0x4, 0x3, 0x1000, 0x6, 0x2, 0x9f8, 0x9, 0x81, 0x43e, 0x3, 0x81, 0x2, 0x8, 0x1, 0x8000, 0x2, 0x6, 0x3, 0x4, 0x9, 0xfaac, 0x1, 0x9, 0x0, 0x3, 0x800, 0x7, 0x6, 0x2, 0x9, 0x7, 0x6, 0x8000, 0x36, 0x5, 0x2, 0x4, 0x6, 0x8001, 0x1, 0x98a0, 0x8d80, 0x1f, 0x3f, 0x2, 0x4, 0x3, 0xffff, 0x5, 0x81, 0x8, 0x7, 0x0, 0xff, 0x80, 0x1, 0x8f3, 0x2, 0xe2e0, 0x3, 0x9, 0xf88, 0x0, 0xc850, 0x2, 0xb6e, 0x1, 0x8, 0x547e, 0x6ac236db, 0x1, 0x2c8d, 0x1, 0x2, 0x4, 0x8, 0x6, 0x6, 0x100, 0x0, 0xfffffffe, 0xa1, 0x6, 0x10000, 0xa302, 0x80000001, 0x7, 0x0, 0x0, 0x6a, 0x6, 0x7, 0x3, 0x9, 0x0, 0x8, 0x2, 0xffff80bd, 0x401, 0x3f, 0x7ff, 0x1bd8, 0x1, 0x6, 0xb1, 0x3, 0x3, 0x200, 0x2, 0x1ff, 0xe933, 0x4, 0x7fffffff, 0x3, 0x0, 0x7fff, 0x40, 0x5, 0x5, 0x2, 0x7ff, 0x80, 0x7, 0x3aa1, 0x2, 0x8, 0x8, 0x1000, 0x5, 0x3, 0x0, 0x8f8, 0x80, 0x9bf9, 0x71, 0x6, 0x21, 0xb07, 0x0, 0x3f, 0x81, 0x8001, 0xffffffff, 0xfff, 0xba16, 0x8, 0x1f6, 0x9, 0xa, 0x0, 0x3, 0x4, 0x2, 0xffff0001, 0xffff, 0x3, 0x0, 0x5, 0x14, 0xc, 0x66c6, 0x7fffffff, 0xffffff78, 0x0, 0x9, 0x9, 0x40, 0x4, 0x7533, 0x80000000, 0x2, 0xa32, 0x5, 0x40, 0x81, 0x7fff, 0x2, 0xfffffffc, 0x8, 0x9, 0x7, 0x5, 0x8d, 0x80000000, 0xda, 0x80000001, 0x2, 0x2, 0x80, 0x6, 0xffffff00, 0x1, 0x7fff, 0x4, 0x4, 0x2, 0x10001, 0x0, 0x7fff, 0x1000, 0x1, 0x81, 0x7ff, 0xa88fe5b, 0x5, 0xffffff80, 0x400, 0x6, 0x6, 0x2, 0x8, 0xbfa0, 0x1000, 0x9, 0xffff, 0x8, 0x0, 0x8, 0x6, 0x3, 0x4, 0x1, 0x1f, 0x10001, 0x8000, 0xfffffb70, 0x1, 0x2, 0x7, 0x3, 0x2, 0x80000000, 0x4, 0x29f0, 0x1ff, 0x1ff, 0x46af0591, 0x68a954a, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x3, 0xffffda6d, 0x3, 0x7, 0x3, 0x3, 0x8c7d, 0x40, 0xea, 0x8, 0x9, 0x8, 0x2, 0x5, 0x2, 0x1, 0xffffffff, 0x10000, 0x0, 0x80, 0x7, 0x50, 0xfffffffb, 0x3, 0x1, 0x3f, 0x4, 0x1, 0x8000, 0xffff6417, 0x80, 0x1, 0x9bc, 0x3, 0x0, 0x20, 0x4, 0x8000, 0xf3, 0x10000, 0xa24c, 0x1, 0x20, 0x1ff, 0x40, 0x1, 0x0, 0x4, 0xd90, 0xac, 0x4, 0x5b, 0x7fffffff, 0x400, 0x101, 0x8, 0x101, 0x472, 0x6, 0x1, 0x1, 0x3, 0x0, 0x3, 0x40, 0x3, 0x1, 0x200, 0x3, 0x5, 0x1, 0x4, 0x395a, 0xd1b9, 0x1, 0x5, 0x3ff, 0x5, 0x2, 0x4, 0x4, 0x7, 0x3, 0x40, 0x3ff, 0x401, 0x1, 0x0, 0x9, 0x7fff, 0x0, 0x0, 0x80000000, 0x8, 0x80, 0x2, 0xfffffff8, 0x9, 0xffffff01, 0x4, 0x7, 0x8, 0x0, 0x20, 0x5e21, 0xffffffff, 0x4, 0x1f, 0x100, 0x248, 0x1ff, 0x8, 0x6fc, 0x8, 0x8, 0x3f, 0xff, 0x5, 0xffff, 0x7fff, 0x7, 0x9, 0x14, 0x7fffffff, 0xffffffff, 0x0, 0x81, 0x2, 0x7f, 0x1, 0xfff, 0x4, 0x7, 0x4, 0x2, 0x5, 0x10000, 0x6b18d17f, 0x6a3, 0xc48, 0x4, 0x2, 0x0, 0x4, 0x5, 0x1f, 0x6, 0x1ff, 0x12, 0x2, 0x5, 0x1f, 0x3d, 0xffff7fff, 0x7, 0x1, 0x1ff, 0x0, 0x6, 0x5, 0x8000, 0x5, 0xfffffffa, 0x6, 0xc17, 0x7ff, 0x80000000, 0x0, 0xe3f, 0x9, 0x62, 0x3, 0x4, 0x3ff, 0x2a19, 0x1, 0x5, 0x8000, 0x78, 0x226, 0x8, 0x1, 0xfffffffa, 0x400, 0x7, 0x3, 0x8, 0x1, 0x8, 0xa3f, 0x0, 0x4fc, 0x101, 0x6, 0x1, 0x6, 0x2, 0x1, 0x7ff, 0x8, 0x80000000, 0x1, 0x1, 0x1, 0x5, 0x4, 0x5, 0x8, 0x7, 0xfff, 0xde94, 0xf6c, 0x347, 0x9, 0x1, 0x3, 0x10000, 0x9, 0x8000, 0x8, 0x3, 0xfffffbff, 0x80000000, 0x1, 0x8001, 0x5, 0x1, 0x9, 0x9, 0x7, 0x2, 0x2, 0x6, 0x5, 0x3f, 0x3, 0xfff, 0x9, 0x0, 0xc195, 0x3, 0x5, 0x1, 0x500e, 0x4, 0x3, 0xff, 0xffff, 0x7, 0x1, 0x4, 0x8, 0x100, 0x65, 0x3, 0x7ff, 0x64e, 0x40, 0x0, 0x10001, 0x7fffffff, 0x7, 0xda3, 0x4, 0x376d7044, 0xf2a2, 0x1000, 0xff, 0x1, 0x8, 0x6, 0x7f, 0x8, 0x3f, 0x0, 0x57, 0x1, 0x7, 0x4, 0x7, 0x7, 0xfff, 0x8, 0x5bcf, 0x3ff, 0x300, 0x40000000, 0x1522, 0x100, 0x9, 0xfffffffb, 0x3ff, 0x30b, 0x6, 0xfff, 0x2, 0x39fa, 0x6, 0x3, 0x8, 0x7, 0x7, 0x5, 0x6, 0x80, 0x3, 0x1ff, 0x6, 0x7, 0xffffffff, 0x4, 0x4, 0xffffff80, 0x3, 0x9, 0xff, 0x6a, 0x8, 0x29, 0x1, 0x6, 0x2, 0x9, 0x6, 0x7, 0xffff, 0x80, 0xfff, 0xffe00000, 0x80000001, 0x10001, 0x1ff, 0xfff, 0xfff, 0x0, 0x7fffffff, 0x800, 0x9, 0x1, 0xfffffffb, 0x80000000, 0x2, 0x646, 0x3, 0x0, 0x3, 0x7, 0x6, 0x1, 0x1, 0x54aa, 0xfffffff7, 0x6, 0x80000001, 0x1, 0x0, 0x1, 0x9, 0x5849, 0x1f, 0x97af, 0x0, 0x60, 0x4, 0x8, 0x4, 0x9, 0x6, 0xfffffa03, 0x800, 0x5fbeaa1a, 0x80000001, 0x0, 0xfffffffd, 0x4, 0x101, 0xdd3f, 0x6, 0x6, 0x483, 0x6, 0x9, 0x9, 0xfff, 0x1, 0x0, 0x6, 0x7, 0x2, 0x4, 0x0, 0x20, 0x60, 0xaaa, 0x9, 0x40, 0x10000, 0x0, 0xf0000000, 0x7fffffff, 0x5, 0x101, 0x6, 0x7ff, 0x101, 0x9798, 0x2, 0x7fff, 0x10001, 0x8001, 0x4, 0x7, 0x18, 0x8, 0xd95a, 0x4, 0x7, 0x8, 0xb282, 0x1, 0x0, 0x6, 0x4, 0xb3f, 0x380, 0x8000, 0x3, 0x0, 0xb03, 0x0, 0x80000000, 0x8001, 0x2, 0x0, 0x7f, 0x6, 0x4, 0x2, 0x5, 0xc7, 0x1f, 0x0, 0x81, 0xffffffff, 0x80000000, 0x9, 0xffffffff, 0x80000000, 0x7fffffff, 0x4, 0x20, 0xcf0, 0xe80c, 0x8, 0x6, 0x1000, 0x78, 0x4, 0x5, 0x6, 0xc67, 0x9, 0x81, 0x5, 0x5, 0xf4, 0x977b, 0x3ff, 0x9, 0x8000, 0xff, 0x5, 0xded5, 0x3, 0x800, 0x3, 0x1, 0x4, 0x4, 0xc9c, 0x7, 0x7fd, 0xa4a1, 0x3, 0x6, 0x2, 0x5c, 0x7, 0x2, 0x2, 0x10000, 0x400, 0x800, 0x8, 0x0, 0x1, 0x80000, 0x7, 0x478, 0x100, 0x1f, 0x8, 0x6, 0xff, 0x1, 0xffff, 0x1, 0x7, 0x403a, 0x3ff, 0xffff, 0x81, 0xe0, 0x8, 0x1000, 0x8, 0x831f, 0x9046, 0x6, 0x40, 0x5cfc, 0xfffffff8, 0x9, 0x9dc, 0x3, 0x7fffffff, 0x80, 0x7, 0x1, 0x4486, 0x1, 0x5, 0x8, 0x1ff, 0x1, 0x9, 0x8, 0x2, 0x7ff, 0x26, 0x0, 0x4ff5, 0x40, 0x7, 0x8, 0x8, 0x1ff, 0x7, 0x4, 0x1f, 0x1000, 0x590, 0x3, 0x81, 0xffff, 0x4, 0x2, 0xc9d1, 0x0, 0x2, 0x7fffffff, 0x8, 0x6, 0x6, 0x5, 0x8bdd, 0x6, 0x101, 0x6c325de4, 0x4, 0x7f, 0xfffffff7, 0x4, 0x200, 0x40, 0x3f, 0x6, 0x101, 0x2, 0x401, 0xfc0000, 0x3, 0x74, 0x7, 0xffff845a, 0x38000000, 0x7, 0xffffff92, 0x4, 0x0, 0x2, 0x400bcb26, 0x100, 0x1, 0x3, 0x1, 0x5f63, 0x1, 0x2, 0x80000001, 0x6, 0xff, 0x1000, 0x40, 0x3b, 0x9, 0x8, 0x87f4, 0x3, 0xd34, 0x20, 0xfffffffc, 0x1f, 0x3ff, 0x0, 0x7, 0x3, 0x6, 0xbfd, 0xfffffe01, 0x49536275, 0x7fffffff, 0x4, 0xb9e, 0x1, 0x3, 0x1, 0x89a, 0xfffffffd, 0x13, 0x1, 0x9958, 0x2, 0x5, 0x81, 0x5, 0x3, 0x40, 0x41, 0x2, 0x1, 0x9, 0x1, 0x5f, 0x23, 0x20, 0x8, 0x15d, 0xff, 0x6, 0x7f, 0x7, 0x8, 0x8000, 0x80000001, 0x0, 0x2, 0x3f, 0x1369, 0x1, 0x2, 0x9, 0x401, 0x7f, 0x6, 0x8, 0x1, 0xa92, 0x10a, 0x1, 0x0, 0x14000, 0x2, 0x1, 0x10000, 0x0, 0xfffffff7, 0x2, 0x5, 0xdbcc, 0x9, 0x5, 0x4, 0x2, 0x4, 0x2, 0x2, 0xfffffffc, 0x20, 0x6, 0x1, 0x2, 0x5, 0x7fffffff, 0x5, 0x4dba, 0x2, 0x4, 0x3, 0x7, 0xc1, 0x8, 0x97, 0xfffffff7, 0x7fffffff, 0x0, 0x100, 0x5, 0x8, 0x4, 0x2, 0x1000, 0x3, 0x100, 0xef7d, 0x9, 0x9, 0x8000, 0x400, 0x7f, 0xffffffff, 0xe4, 0x3, 0x200, 0x80, 0x7ff, 0x4, 0x32, 0x8, 0x5, 0x8001, 0xffff8000, 0x400, 0x0, 0x8, 0x83, 0x8, 0x3ff, 0x8000, 0x1, 0xffff, 0x6, 0x52, 0x658]}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000001840)=0x3) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23:01:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) 23:01:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) rt_tgsigqueueinfo(0x0, 0xffffffffffffffff, 0xb, &(0x7f0000000880)={0x3b, 0x4}) [ 2394.818235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2394.828157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:01:37 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}}, 0x4) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r1 = syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) r2 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x8, 0x200) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000800)={{0x1, 0x3, 0x4, 0x2, 0x2, 0x2}, 0xb2, [0x0, 0xe6, 0xffffffc0, 0x6164, 0x0, 0x4, 0x8, 0x8001, 0xebf8, 0x8, 0x4, 0xffffffff, 0x0, 0x1, 0x3, 0x3, 0x1000, 0x5, 0x0, 0x2000, 0x44, 0x1dac, 0x7, 0x7, 0x1, 0xc30, 0x1f, 0x8b16, 0x4, 0x4, 0x1fd, 0x1, 0x3, 0xd0, 0x3, 0x3, 0x2, 0x4, 0x3, 0x1000, 0x6, 0x2, 0x9f8, 0x9, 0x81, 0x43e, 0x3, 0x81, 0x2, 0x8, 0x1, 0x8000, 0x2, 0x6, 0x3, 0x4, 0x9, 0xfaac, 0x1, 0x9, 0x0, 0x3, 0x800, 0x7, 0x6, 0x2, 0x9, 0x7, 0x6, 0x8000, 0x36, 0x5, 0x2, 0x4, 0x6, 0x8001, 0x1, 0x98a0, 0x8d80, 0x1f, 0x3f, 0x2, 0x4, 0x3, 0xffff, 0x5, 0x81, 0x8, 0x7, 0x0, 0xff, 0x80, 0x1, 0x8f3, 0x2, 0xe2e0, 0x3, 0x9, 0xf88, 0x0, 0xc850, 0x2, 0xb6e, 0x1, 0x8, 0x547e, 0x6ac236db, 0x1, 0x2c8d, 0x1, 0x2, 0x4, 0x8, 0x6, 0x6, 0x100, 0x0, 0xfffffffe, 0xa1, 0x6, 0x10000, 0xa302, 0x80000001, 0x7, 0x0, 0x0, 0x6a, 0x6, 0x7, 0x3, 0x9, 0x0, 0x8, 0x2, 0xffff80bd, 0x401, 0x3f, 0x7ff, 0x1bd8, 0x1, 0x6, 0xb1, 0x3, 0x3, 0x200, 0x2, 0x1ff, 0xe933, 0x4, 0x7fffffff, 0x3, 0x0, 0x7fff, 0x40, 0x5, 0x5, 0x2, 0x7ff, 0x80, 0x7, 0x3aa1, 0x2, 0x8, 0x8, 0x1000, 0x5, 0x3, 0x0, 0x8f8, 0x80, 0x9bf9, 0x71, 0x6, 0x21, 0xb07, 0x0, 0x3f, 0x81, 0x8001, 0xffffffff, 0xfff, 0xba16, 0x8, 0x1f6, 0x9, 0xa, 0x0, 0x3, 0x4, 0x2, 0xffff0001, 0xffff, 0x3, 0x0, 0x5, 0x14, 0xc, 0x66c6, 0x7fffffff, 0xffffff78, 0x0, 0x9, 0x9, 0x40, 0x4, 0x7533, 0x80000000, 0x2, 0xa32, 0x5, 0x40, 0x81, 0x7fff, 0x2, 0xfffffffc, 0x8, 0x9, 0x7, 0x5, 0x8d, 0x80000000, 0xda, 0x80000001, 0x2, 0x2, 0x80, 0x6, 0xffffff00, 0x1, 0x7fff, 0x4, 0x4, 0x2, 0x10001, 0x0, 0x7fff, 0x1000, 0x1, 0x81, 0x7ff, 0xa88fe5b, 0x5, 0xffffff80, 0x400, 0x6, 0x6, 0x2, 0x8, 0xbfa0, 0x1000, 0x9, 0xffff, 0x8, 0x0, 0x8, 0x6, 0x3, 0x4, 0x1, 0x1f, 0x10001, 0x8000, 0xfffffb70, 0x1, 0x2, 0x7, 0x3, 0x2, 0x80000000, 0x4, 0x29f0, 0x1ff, 0x1ff, 0x46af0591, 0x68a954a, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x3, 0xffffda6d, 0x3, 0x7, 0x3, 0x3, 0x8c7d, 0x40, 0xea, 0x8, 0x9, 0x8, 0x2, 0x5, 0x2, 0x1, 0xffffffff, 0x10000, 0x0, 0x80, 0x7, 0x50, 0xfffffffb, 0x3, 0x1, 0x3f, 0x4, 0x1, 0x8000, 0xffff6417, 0x80, 0x1, 0x9bc, 0x3, 0x0, 0x20, 0x4, 0x8000, 0xf3, 0x10000, 0xa24c, 0x1, 0x20, 0x1ff, 0x40, 0x1, 0x0, 0x4, 0xd90, 0xac, 0x4, 0x5b, 0x7fffffff, 0x400, 0x101, 0x8, 0x101, 0x472, 0x6, 0x1, 0x1, 0x3, 0x0, 0x3, 0x40, 0x3, 0x1, 0x200, 0x3, 0x5, 0x1, 0x4, 0x395a, 0xd1b9, 0x1, 0x5, 0x3ff, 0x5, 0x2, 0x4, 0x4, 0x7, 0x3, 0x40, 0x3ff, 0x401, 0x1, 0x0, 0x9, 0x7fff, 0x0, 0x0, 0x80000000, 0x8, 0x80, 0x2, 0xfffffff8, 0x9, 0xffffff01, 0x4, 0x7, 0x8, 0x0, 0x20, 0x5e21, 0xffffffff, 0x4, 0x1f, 0x100, 0x248, 0x1ff, 0x8, 0x6fc, 0x8, 0x8, 0x3f, 0xff, 0x5, 0xffff, 0x7fff, 0x7, 0x9, 0x14, 0x7fffffff, 0xffffffff, 0x0, 0x81, 0x2, 0x7f, 0x1, 0xfff, 0x4, 0x7, 0x4, 0x2, 0x5, 0x10000, 0x6b18d17f, 0x6a3, 0xc48, 0x4, 0x2, 0x0, 0x4, 0x5, 0x1f, 0x6, 0x1ff, 0x12, 0x2, 0x5, 0x1f, 0x3d, 0xffff7fff, 0x7, 0x1, 0x1ff, 0x0, 0x6, 0x5, 0x8000, 0x5, 0xfffffffa, 0x6, 0xc17, 0x7ff, 0x80000000, 0x0, 0xe3f, 0x9, 0x62, 0x3, 0x4, 0x3ff, 0x2a19, 0x1, 0x5, 0x8000, 0x78, 0x226, 0x8, 0x1, 0xfffffffa, 0x400, 0x7, 0x3, 0x8, 0x1, 0x8, 0xa3f, 0x0, 0x4fc, 0x101, 0x6, 0x1, 0x6, 0x2, 0x1, 0x7ff, 0x8, 0x80000000, 0x1, 0x1, 0x1, 0x5, 0x4, 0x5, 0x8, 0x7, 0xfff, 0xde94, 0xf6c, 0x347, 0x9, 0x1, 0x3, 0x10000, 0x9, 0x8000, 0x8, 0x3, 0xfffffbff, 0x80000000, 0x1, 0x8001, 0x5, 0x1, 0x9, 0x9, 0x7, 0x2, 0x2, 0x6, 0x5, 0x3f, 0x3, 0xfff, 0x9, 0x0, 0xc195, 0x3, 0x5, 0x1, 0x500e, 0x4, 0x3, 0xff, 0xffff, 0x7, 0x1, 0x4, 0x8, 0x100, 0x65, 0x3, 0x7ff, 0x64e, 0x40, 0x0, 0x10001, 0x7fffffff, 0x7, 0xda3, 0x4, 0x376d7044, 0xf2a2, 0x1000, 0xff, 0x1, 0x8, 0x6, 0x7f, 0x8, 0x3f, 0x0, 0x57, 0x1, 0x7, 0x4, 0x7, 0x7, 0xfff, 0x8, 0x5bcf, 0x3ff, 0x300, 0x40000000, 0x1522, 0x100, 0x9, 0xfffffffb, 0x3ff, 0x30b, 0x6, 0xfff, 0x2, 0x39fa, 0x6, 0x3, 0x8, 0x7, 0x7, 0x5, 0x6, 0x80, 0x3, 0x1ff, 0x6, 0x7, 0xffffffff, 0x4, 0x4, 0xffffff80, 0x3, 0x9, 0xff, 0x6a, 0x8, 0x29, 0x1, 0x6, 0x2, 0x9, 0x6, 0x7, 0xffff, 0x80, 0xfff, 0xffe00000, 0x80000001, 0x10001, 0x1ff, 0xfff, 0xfff, 0x0, 0x7fffffff, 0x800, 0x9, 0x1, 0xfffffffb, 0x80000000, 0x2, 0x646, 0x3, 0x0, 0x3, 0x7, 0x6, 0x1, 0x1, 0x54aa, 0xfffffff7, 0x6, 0x80000001, 0x1, 0x0, 0x1, 0x9, 0x5849, 0x1f, 0x97af, 0x0, 0x60, 0x4, 0x8, 0x4, 0x9, 0x6, 0xfffffa03, 0x800, 0x5fbeaa1a, 0x80000001, 0x0, 0xfffffffd, 0x4, 0x101, 0xdd3f, 0x6, 0x6, 0x483, 0x6, 0x9, 0x9, 0xfff, 0x1, 0x0, 0x6, 0x7, 0x2, 0x4, 0x0, 0x20, 0x60, 0xaaa, 0x9, 0x40, 0x10000, 0x0, 0xf0000000, 0x7fffffff, 0x5, 0x101, 0x6, 0x7ff, 0x101, 0x9798, 0x2, 0x7fff, 0x10001, 0x8001, 0x4, 0x7, 0x18, 0x8, 0xd95a, 0x4, 0x7, 0x8, 0xb282, 0x1, 0x0, 0x6, 0x4, 0xb3f, 0x380, 0x8000, 0x3, 0x0, 0xb03, 0x0, 0x80000000, 0x8001, 0x2, 0x0, 0x7f, 0x6, 0x4, 0x2, 0x5, 0xc7, 0x1f, 0x0, 0x81, 0xffffffff, 0x80000000, 0x9, 0xffffffff, 0x80000000, 0x7fffffff, 0x4, 0x20, 0xcf0, 0xe80c, 0x8, 0x6, 0x1000, 0x78, 0x4, 0x5, 0x6, 0xc67, 0x9, 0x81, 0x5, 0x5, 0xf4, 0x977b, 0x3ff, 0x9, 0x8000, 0xff, 0x5, 0xded5, 0x3, 0x800, 0x3, 0x1, 0x4, 0x4, 0xc9c, 0x7, 0x7fd, 0xa4a1, 0x3, 0x6, 0x2, 0x5c, 0x7, 0x2, 0x2, 0x10000, 0x400, 0x800, 0x8, 0x0, 0x1, 0x80000, 0x7, 0x478, 0x100, 0x1f, 0x8, 0x6, 0xff, 0x1, 0xffff, 0x1, 0x7, 0x403a, 0x3ff, 0xffff, 0x81, 0xe0, 0x8, 0x1000, 0x8, 0x831f, 0x9046, 0x6, 0x40, 0x5cfc, 0xfffffff8, 0x9, 0x9dc, 0x3, 0x7fffffff, 0x80, 0x7, 0x1, 0x4486, 0x1, 0x5, 0x8, 0x1ff, 0x1, 0x9, 0x8, 0x2, 0x7ff, 0x26, 0x0, 0x4ff5, 0x40, 0x7, 0x8, 0x8, 0x1ff, 0x7, 0x4, 0x1f, 0x1000, 0x590, 0x3, 0x81, 0xffff, 0x4, 0x2, 0xc9d1, 0x0, 0x2, 0x7fffffff, 0x8, 0x6, 0x6, 0x5, 0x8bdd, 0x6, 0x101, 0x6c325de4, 0x4, 0x7f, 0xfffffff7, 0x4, 0x200, 0x40, 0x3f, 0x6, 0x101, 0x2, 0x401, 0xfc0000, 0x3, 0x74, 0x7, 0xffff845a, 0x38000000, 0x7, 0xffffff92, 0x4, 0x0, 0x2, 0x400bcb26, 0x100, 0x1, 0x3, 0x1, 0x5f63, 0x1, 0x2, 0x80000001, 0x6, 0xff, 0x1000, 0x40, 0x3b, 0x9, 0x8, 0x87f4, 0x3, 0xd34, 0x20, 0xfffffffc, 0x1f, 0x3ff, 0x0, 0x7, 0x3, 0x6, 0xbfd, 0xfffffe01, 0x49536275, 0x7fffffff, 0x4, 0xb9e, 0x1, 0x3, 0x1, 0x89a, 0xfffffffd, 0x13, 0x1, 0x9958, 0x2, 0x5, 0x81, 0x5, 0x3, 0x40, 0x41, 0x2, 0x1, 0x9, 0x1, 0x5f, 0x23, 0x20, 0x8, 0x15d, 0xff, 0x6, 0x7f, 0x7, 0x8, 0x8000, 0x80000001, 0x0, 0x2, 0x3f, 0x1369, 0x1, 0x2, 0x9, 0x401, 0x7f, 0x6, 0x8, 0x1, 0xa92, 0x10a, 0x1, 0x0, 0x14000, 0x2, 0x1, 0x10000, 0x0, 0xfffffff7, 0x2, 0x5, 0xdbcc, 0x9, 0x5, 0x4, 0x2, 0x4, 0x2, 0x2, 0xfffffffc, 0x20, 0x6, 0x1, 0x2, 0x5, 0x7fffffff, 0x5, 0x4dba, 0x2, 0x4, 0x3, 0x7, 0xc1, 0x8, 0x97, 0xfffffff7, 0x7fffffff, 0x0, 0x100, 0x5, 0x8, 0x4, 0x2, 0x1000, 0x3, 0x100, 0xef7d, 0x9, 0x9, 0x8000, 0x400, 0x7f, 0xffffffff, 0xe4, 0x3, 0x200, 0x80, 0x7ff, 0x4, 0x32, 0x8, 0x5, 0x8001, 0xffff8000, 0x400, 0x0, 0x8, 0x83, 0x8, 0x3ff, 0x8000, 0x1, 0xffff, 0x6, 0x52, 0x658]}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000001840)=0x3) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5b}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xfe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x804) 23:01:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000800)={{0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, {0xa, 0x4e24, 0x6, @mcast2, 0x8}, 0x5, [0x773, 0x2, 0x7a7, 0x302, 0x5, 0x1, 0x7fffffff, 0x4]}, 0x5c) 23:01:37 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) accept$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040054) 23:01:37 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) accept$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040054) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@local, @in=@multicast2}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000ac0)=0xe8) 23:01:37 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x4090) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f00000007c0)={{0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, {0xa, 0x4e21, 0x8001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}, 0x7, [0x5, 0x7, 0x2, 0xff, 0x50e5, 0x80000000, 0x6, 0x7373]}, 0x5c) 23:01:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) 23:01:37 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}}, 0x4) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r1 = syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) r2 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x8, 0x200) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f0000000800)={{0x1, 0x3, 0x4, 0x2, 0x2, 0x2}, 0xb2, [0x0, 0xe6, 0xffffffc0, 0x6164, 0x0, 0x4, 0x8, 0x8001, 0xebf8, 0x8, 0x4, 0xffffffff, 0x0, 0x1, 0x3, 0x3, 0x1000, 0x5, 0x0, 0x2000, 0x44, 0x1dac, 0x7, 0x7, 0x1, 0xc30, 0x1f, 0x8b16, 0x4, 0x4, 0x1fd, 0x1, 0x3, 0xd0, 0x3, 0x3, 0x2, 0x4, 0x3, 0x1000, 0x6, 0x2, 0x9f8, 0x9, 0x81, 0x43e, 0x3, 0x81, 0x2, 0x8, 0x1, 0x8000, 0x2, 0x6, 0x3, 0x4, 0x9, 0xfaac, 0x1, 0x9, 0x0, 0x3, 0x800, 0x7, 0x6, 0x2, 0x9, 0x7, 0x6, 0x8000, 0x36, 0x5, 0x2, 0x4, 0x6, 0x8001, 0x1, 0x98a0, 0x8d80, 0x1f, 0x3f, 0x2, 0x4, 0x3, 0xffff, 0x5, 0x81, 0x8, 0x7, 0x0, 0xff, 0x80, 0x1, 0x8f3, 0x2, 0xe2e0, 0x3, 0x9, 0xf88, 0x0, 0xc850, 0x2, 0xb6e, 0x1, 0x8, 0x547e, 0x6ac236db, 0x1, 0x2c8d, 0x1, 0x2, 0x4, 0x8, 0x6, 0x6, 0x100, 0x0, 0xfffffffe, 0xa1, 0x6, 0x10000, 0xa302, 0x80000001, 0x7, 0x0, 0x0, 0x6a, 0x6, 0x7, 0x3, 0x9, 0x0, 0x8, 0x2, 0xffff80bd, 0x401, 0x3f, 0x7ff, 0x1bd8, 0x1, 0x6, 0xb1, 0x3, 0x3, 0x200, 0x2, 0x1ff, 0xe933, 0x4, 0x7fffffff, 0x3, 0x0, 0x7fff, 0x40, 0x5, 0x5, 0x2, 0x7ff, 0x80, 0x7, 0x3aa1, 0x2, 0x8, 0x8, 0x1000, 0x5, 0x3, 0x0, 0x8f8, 0x80, 0x9bf9, 0x71, 0x6, 0x21, 0xb07, 0x0, 0x3f, 0x81, 0x8001, 0xffffffff, 0xfff, 0xba16, 0x8, 0x1f6, 0x9, 0xa, 0x0, 0x3, 0x4, 0x2, 0xffff0001, 0xffff, 0x3, 0x0, 0x5, 0x14, 0xc, 0x66c6, 0x7fffffff, 0xffffff78, 0x0, 0x9, 0x9, 0x40, 0x4, 0x7533, 0x80000000, 0x2, 0xa32, 0x5, 0x40, 0x81, 0x7fff, 0x2, 0xfffffffc, 0x8, 0x9, 0x7, 0x5, 0x8d, 0x80000000, 0xda, 0x80000001, 0x2, 0x2, 0x80, 0x6, 0xffffff00, 0x1, 0x7fff, 0x4, 0x4, 0x2, 0x10001, 0x0, 0x7fff, 0x1000, 0x1, 0x81, 0x7ff, 0xa88fe5b, 0x5, 0xffffff80, 0x400, 0x6, 0x6, 0x2, 0x8, 0xbfa0, 0x1000, 0x9, 0xffff, 0x8, 0x0, 0x8, 0x6, 0x3, 0x4, 0x1, 0x1f, 0x10001, 0x8000, 0xfffffb70, 0x1, 0x2, 0x7, 0x3, 0x2, 0x80000000, 0x4, 0x29f0, 0x1ff, 0x1ff, 0x46af0591, 0x68a954a, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x3, 0xffffda6d, 0x3, 0x7, 0x3, 0x3, 0x8c7d, 0x40, 0xea, 0x8, 0x9, 0x8, 0x2, 0x5, 0x2, 0x1, 0xffffffff, 0x10000, 0x0, 0x80, 0x7, 0x50, 0xfffffffb, 0x3, 0x1, 0x3f, 0x4, 0x1, 0x8000, 0xffff6417, 0x80, 0x1, 0x9bc, 0x3, 0x0, 0x20, 0x4, 0x8000, 0xf3, 0x10000, 0xa24c, 0x1, 0x20, 0x1ff, 0x40, 0x1, 0x0, 0x4, 0xd90, 0xac, 0x4, 0x5b, 0x7fffffff, 0x400, 0x101, 0x8, 0x101, 0x472, 0x6, 0x1, 0x1, 0x3, 0x0, 0x3, 0x40, 0x3, 0x1, 0x200, 0x3, 0x5, 0x1, 0x4, 0x395a, 0xd1b9, 0x1, 0x5, 0x3ff, 0x5, 0x2, 0x4, 0x4, 0x7, 0x3, 0x40, 0x3ff, 0x401, 0x1, 0x0, 0x9, 0x7fff, 0x0, 0x0, 0x80000000, 0x8, 0x80, 0x2, 0xfffffff8, 0x9, 0xffffff01, 0x4, 0x7, 0x8, 0x0, 0x20, 0x5e21, 0xffffffff, 0x4, 0x1f, 0x100, 0x248, 0x1ff, 0x8, 0x6fc, 0x8, 0x8, 0x3f, 0xff, 0x5, 0xffff, 0x7fff, 0x7, 0x9, 0x14, 0x7fffffff, 0xffffffff, 0x0, 0x81, 0x2, 0x7f, 0x1, 0xfff, 0x4, 0x7, 0x4, 0x2, 0x5, 0x10000, 0x6b18d17f, 0x6a3, 0xc48, 0x4, 0x2, 0x0, 0x4, 0x5, 0x1f, 0x6, 0x1ff, 0x12, 0x2, 0x5, 0x1f, 0x3d, 0xffff7fff, 0x7, 0x1, 0x1ff, 0x0, 0x6, 0x5, 0x8000, 0x5, 0xfffffffa, 0x6, 0xc17, 0x7ff, 0x80000000, 0x0, 0xe3f, 0x9, 0x62, 0x3, 0x4, 0x3ff, 0x2a19, 0x1, 0x5, 0x8000, 0x78, 0x226, 0x8, 0x1, 0xfffffffa, 0x400, 0x7, 0x3, 0x8, 0x1, 0x8, 0xa3f, 0x0, 0x4fc, 0x101, 0x6, 0x1, 0x6, 0x2, 0x1, 0x7ff, 0x8, 0x80000000, 0x1, 0x1, 0x1, 0x5, 0x4, 0x5, 0x8, 0x7, 0xfff, 0xde94, 0xf6c, 0x347, 0x9, 0x1, 0x3, 0x10000, 0x9, 0x8000, 0x8, 0x3, 0xfffffbff, 0x80000000, 0x1, 0x8001, 0x5, 0x1, 0x9, 0x9, 0x7, 0x2, 0x2, 0x6, 0x5, 0x3f, 0x3, 0xfff, 0x9, 0x0, 0xc195, 0x3, 0x5, 0x1, 0x500e, 0x4, 0x3, 0xff, 0xffff, 0x7, 0x1, 0x4, 0x8, 0x100, 0x65, 0x3, 0x7ff, 0x64e, 0x40, 0x0, 0x10001, 0x7fffffff, 0x7, 0xda3, 0x4, 0x376d7044, 0xf2a2, 0x1000, 0xff, 0x1, 0x8, 0x6, 0x7f, 0x8, 0x3f, 0x0, 0x57, 0x1, 0x7, 0x4, 0x7, 0x7, 0xfff, 0x8, 0x5bcf, 0x3ff, 0x300, 0x40000000, 0x1522, 0x100, 0x9, 0xfffffffb, 0x3ff, 0x30b, 0x6, 0xfff, 0x2, 0x39fa, 0x6, 0x3, 0x8, 0x7, 0x7, 0x5, 0x6, 0x80, 0x3, 0x1ff, 0x6, 0x7, 0xffffffff, 0x4, 0x4, 0xffffff80, 0x3, 0x9, 0xff, 0x6a, 0x8, 0x29, 0x1, 0x6, 0x2, 0x9, 0x6, 0x7, 0xffff, 0x80, 0xfff, 0xffe00000, 0x80000001, 0x10001, 0x1ff, 0xfff, 0xfff, 0x0, 0x7fffffff, 0x800, 0x9, 0x1, 0xfffffffb, 0x80000000, 0x2, 0x646, 0x3, 0x0, 0x3, 0x7, 0x6, 0x1, 0x1, 0x54aa, 0xfffffff7, 0x6, 0x80000001, 0x1, 0x0, 0x1, 0x9, 0x5849, 0x1f, 0x97af, 0x0, 0x60, 0x4, 0x8, 0x4, 0x9, 0x6, 0xfffffa03, 0x800, 0x5fbeaa1a, 0x80000001, 0x0, 0xfffffffd, 0x4, 0x101, 0xdd3f, 0x6, 0x6, 0x483, 0x6, 0x9, 0x9, 0xfff, 0x1, 0x0, 0x6, 0x7, 0x2, 0x4, 0x0, 0x20, 0x60, 0xaaa, 0x9, 0x40, 0x10000, 0x0, 0xf0000000, 0x7fffffff, 0x5, 0x101, 0x6, 0x7ff, 0x101, 0x9798, 0x2, 0x7fff, 0x10001, 0x8001, 0x4, 0x7, 0x18, 0x8, 0xd95a, 0x4, 0x7, 0x8, 0xb282, 0x1, 0x0, 0x6, 0x4, 0xb3f, 0x380, 0x8000, 0x3, 0x0, 0xb03, 0x0, 0x80000000, 0x8001, 0x2, 0x0, 0x7f, 0x6, 0x4, 0x2, 0x5, 0xc7, 0x1f, 0x0, 0x81, 0xffffffff, 0x80000000, 0x9, 0xffffffff, 0x80000000, 0x7fffffff, 0x4, 0x20, 0xcf0, 0xe80c, 0x8, 0x6, 0x1000, 0x78, 0x4, 0x5, 0x6, 0xc67, 0x9, 0x81, 0x5, 0x5, 0xf4, 0x977b, 0x3ff, 0x9, 0x8000, 0xff, 0x5, 0xded5, 0x3, 0x800, 0x3, 0x1, 0x4, 0x4, 0xc9c, 0x7, 0x7fd, 0xa4a1, 0x3, 0x6, 0x2, 0x5c, 0x7, 0x2, 0x2, 0x10000, 0x400, 0x800, 0x8, 0x0, 0x1, 0x80000, 0x7, 0x478, 0x100, 0x1f, 0x8, 0x6, 0xff, 0x1, 0xffff, 0x1, 0x7, 0x403a, 0x3ff, 0xffff, 0x81, 0xe0, 0x8, 0x1000, 0x8, 0x831f, 0x9046, 0x6, 0x40, 0x5cfc, 0xfffffff8, 0x9, 0x9dc, 0x3, 0x7fffffff, 0x80, 0x7, 0x1, 0x4486, 0x1, 0x5, 0x8, 0x1ff, 0x1, 0x9, 0x8, 0x2, 0x7ff, 0x26, 0x0, 0x4ff5, 0x40, 0x7, 0x8, 0x8, 0x1ff, 0x7, 0x4, 0x1f, 0x1000, 0x590, 0x3, 0x81, 0xffff, 0x4, 0x2, 0xc9d1, 0x0, 0x2, 0x7fffffff, 0x8, 0x6, 0x6, 0x5, 0x8bdd, 0x6, 0x101, 0x6c325de4, 0x4, 0x7f, 0xfffffff7, 0x4, 0x200, 0x40, 0x3f, 0x6, 0x101, 0x2, 0x401, 0xfc0000, 0x3, 0x74, 0x7, 0xffff845a, 0x38000000, 0x7, 0xffffff92, 0x4, 0x0, 0x2, 0x400bcb26, 0x100, 0x1, 0x3, 0x1, 0x5f63, 0x1, 0x2, 0x80000001, 0x6, 0xff, 0x1000, 0x40, 0x3b, 0x9, 0x8, 0x87f4, 0x3, 0xd34, 0x20, 0xfffffffc, 0x1f, 0x3ff, 0x0, 0x7, 0x3, 0x6, 0xbfd, 0xfffffe01, 0x49536275, 0x7fffffff, 0x4, 0xb9e, 0x1, 0x3, 0x1, 0x89a, 0xfffffffd, 0x13, 0x1, 0x9958, 0x2, 0x5, 0x81, 0x5, 0x3, 0x40, 0x41, 0x2, 0x1, 0x9, 0x1, 0x5f, 0x23, 0x20, 0x8, 0x15d, 0xff, 0x6, 0x7f, 0x7, 0x8, 0x8000, 0x80000001, 0x0, 0x2, 0x3f, 0x1369, 0x1, 0x2, 0x9, 0x401, 0x7f, 0x6, 0x8, 0x1, 0xa92, 0x10a, 0x1, 0x0, 0x14000, 0x2, 0x1, 0x10000, 0x0, 0xfffffff7, 0x2, 0x5, 0xdbcc, 0x9, 0x5, 0x4, 0x2, 0x4, 0x2, 0x2, 0xfffffffc, 0x20, 0x6, 0x1, 0x2, 0x5, 0x7fffffff, 0x5, 0x4dba, 0x2, 0x4, 0x3, 0x7, 0xc1, 0x8, 0x97, 0xfffffff7, 0x7fffffff, 0x0, 0x100, 0x5, 0x8, 0x4, 0x2, 0x1000, 0x3, 0x100, 0xef7d, 0x9, 0x9, 0x8000, 0x400, 0x7f, 0xffffffff, 0xe4, 0x3, 0x200, 0x80, 0x7ff, 0x4, 0x32, 0x8, 0x5, 0x8001, 0xffff8000, 0x400, 0x0, 0x8, 0x83, 0x8, 0x3ff, 0x8000, 0x1, 0xffff, 0x6, 0x52, 0x658]}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000001840)=0x3) 23:01:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) r6 = socket$inet6(0xa, 0x4, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000006c0)={{{@in, @in6=@private0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f00000007c0)=0xe8) 23:01:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) socket$inet6(0xa, 0x4, 0x5) 23:01:44 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) socket$inet6(0xa, 0x4, 0x5) 23:01:44 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x4090) openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) 23:01:44 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) accept$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x1c) socket$nl_generic(0x10, 0x3, 0x10) 23:01:44 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x0, 0x0}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4b84877cdd6e5e8"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:01:44 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}}, 0x4) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) r1 = syz_open_dev$hiddev(&(0x7f00000007c0), 0x8, 0x200) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000800)={{0x1, 0x3, 0x4, 0x2, 0x2, 0x2}, 0xb2, [0x0, 0xe6, 0xffffffc0, 0x6164, 0x0, 0x4, 0x8, 0x8001, 0xebf8, 0x8, 0x4, 0xffffffff, 0x0, 0x1, 0x3, 0x3, 0x1000, 0x5, 0x0, 0x2000, 0x44, 0x1dac, 0x7, 0x7, 0x1, 0xc30, 0x1f, 0x8b16, 0x4, 0x4, 0x1fd, 0x1, 0x3, 0xd0, 0x3, 0x3, 0x2, 0x4, 0x3, 0x1000, 0x6, 0x2, 0x9f8, 0x9, 0x81, 0x43e, 0x3, 0x81, 0x2, 0x8, 0x1, 0x8000, 0x2, 0x6, 0x3, 0x4, 0x9, 0xfaac, 0x1, 0x9, 0x0, 0x3, 0x800, 0x7, 0x6, 0x2, 0x9, 0x7, 0x6, 0x8000, 0x36, 0x5, 0x2, 0x4, 0x6, 0x8001, 0x1, 0x98a0, 0x8d80, 0x1f, 0x3f, 0x2, 0x4, 0x3, 0xffff, 0x5, 0x81, 0x8, 0x7, 0x0, 0xff, 0x80, 0x1, 0x8f3, 0x2, 0xe2e0, 0x3, 0x9, 0xf88, 0x0, 0xc850, 0x2, 0xb6e, 0x1, 0x8, 0x547e, 0x6ac236db, 0x1, 0x2c8d, 0x1, 0x2, 0x4, 0x8, 0x6, 0x6, 0x100, 0x0, 0xfffffffe, 0xa1, 0x6, 0x10000, 0xa302, 0x80000001, 0x7, 0x0, 0x0, 0x6a, 0x6, 0x7, 0x3, 0x9, 0x0, 0x8, 0x2, 0xffff80bd, 0x401, 0x3f, 0x7ff, 0x1bd8, 0x1, 0x6, 0xb1, 0x3, 0x3, 0x200, 0x2, 0x1ff, 0xe933, 0x4, 0x7fffffff, 0x3, 0x0, 0x7fff, 0x40, 0x5, 0x5, 0x2, 0x7ff, 0x80, 0x7, 0x3aa1, 0x2, 0x8, 0x8, 0x1000, 0x5, 0x3, 0x0, 0x8f8, 0x80, 0x9bf9, 0x71, 0x6, 0x21, 0xb07, 0x0, 0x3f, 0x81, 0x8001, 0xffffffff, 0xfff, 0xba16, 0x8, 0x1f6, 0x9, 0xa, 0x0, 0x3, 0x4, 0x2, 0xffff0001, 0xffff, 0x3, 0x0, 0x5, 0x14, 0xc, 0x66c6, 0x7fffffff, 0xffffff78, 0x0, 0x9, 0x9, 0x40, 0x4, 0x7533, 0x80000000, 0x2, 0xa32, 0x5, 0x40, 0x81, 0x7fff, 0x2, 0xfffffffc, 0x8, 0x9, 0x7, 0x5, 0x8d, 0x80000000, 0xda, 0x80000001, 0x2, 0x2, 0x80, 0x6, 0xffffff00, 0x1, 0x7fff, 0x4, 0x4, 0x2, 0x10001, 0x0, 0x7fff, 0x1000, 0x1, 0x81, 0x7ff, 0xa88fe5b, 0x5, 0xffffff80, 0x400, 0x6, 0x6, 0x2, 0x8, 0xbfa0, 0x1000, 0x9, 0xffff, 0x8, 0x0, 0x8, 0x6, 0x3, 0x4, 0x1, 0x1f, 0x10001, 0x8000, 0xfffffb70, 0x1, 0x2, 0x7, 0x3, 0x2, 0x80000000, 0x4, 0x29f0, 0x1ff, 0x1ff, 0x46af0591, 0x68a954a, 0x6, 0x8, 0x8, 0x1f, 0x2, 0x3, 0xffffda6d, 0x3, 0x7, 0x3, 0x3, 0x8c7d, 0x40, 0xea, 0x8, 0x9, 0x8, 0x2, 0x5, 0x2, 0x1, 0xffffffff, 0x10000, 0x0, 0x80, 0x7, 0x50, 0xfffffffb, 0x3, 0x1, 0x3f, 0x4, 0x1, 0x8000, 0xffff6417, 0x80, 0x1, 0x9bc, 0x3, 0x0, 0x20, 0x4, 0x8000, 0xf3, 0x10000, 0xa24c, 0x1, 0x20, 0x1ff, 0x40, 0x1, 0x0, 0x4, 0xd90, 0xac, 0x4, 0x5b, 0x7fffffff, 0x400, 0x101, 0x8, 0x101, 0x472, 0x6, 0x1, 0x1, 0x3, 0x0, 0x3, 0x40, 0x3, 0x1, 0x200, 0x3, 0x5, 0x1, 0x4, 0x395a, 0xd1b9, 0x1, 0x5, 0x3ff, 0x5, 0x2, 0x4, 0x4, 0x7, 0x3, 0x40, 0x3ff, 0x401, 0x1, 0x0, 0x9, 0x7fff, 0x0, 0x0, 0x80000000, 0x8, 0x80, 0x2, 0xfffffff8, 0x9, 0xffffff01, 0x4, 0x7, 0x8, 0x0, 0x20, 0x5e21, 0xffffffff, 0x4, 0x1f, 0x100, 0x248, 0x1ff, 0x8, 0x6fc, 0x8, 0x8, 0x3f, 0xff, 0x5, 0xffff, 0x7fff, 0x7, 0x9, 0x14, 0x7fffffff, 0xffffffff, 0x0, 0x81, 0x2, 0x7f, 0x1, 0xfff, 0x4, 0x7, 0x4, 0x2, 0x5, 0x10000, 0x6b18d17f, 0x6a3, 0xc48, 0x4, 0x2, 0x0, 0x4, 0x5, 0x1f, 0x6, 0x1ff, 0x12, 0x2, 0x5, 0x1f, 0x3d, 0xffff7fff, 0x7, 0x1, 0x1ff, 0x0, 0x6, 0x5, 0x8000, 0x5, 0xfffffffa, 0x6, 0xc17, 0x7ff, 0x80000000, 0x0, 0xe3f, 0x9, 0x62, 0x3, 0x4, 0x3ff, 0x2a19, 0x1, 0x5, 0x8000, 0x78, 0x226, 0x8, 0x1, 0xfffffffa, 0x400, 0x7, 0x3, 0x8, 0x1, 0x8, 0xa3f, 0x0, 0x4fc, 0x101, 0x6, 0x1, 0x6, 0x2, 0x1, 0x7ff, 0x8, 0x80000000, 0x1, 0x1, 0x1, 0x5, 0x4, 0x5, 0x8, 0x7, 0xfff, 0xde94, 0xf6c, 0x347, 0x9, 0x1, 0x3, 0x10000, 0x9, 0x8000, 0x8, 0x3, 0xfffffbff, 0x80000000, 0x1, 0x8001, 0x5, 0x1, 0x9, 0x9, 0x7, 0x2, 0x2, 0x6, 0x5, 0x3f, 0x3, 0xfff, 0x9, 0x0, 0xc195, 0x3, 0x5, 0x1, 0x500e, 0x4, 0x3, 0xff, 0xffff, 0x7, 0x1, 0x4, 0x8, 0x100, 0x65, 0x3, 0x7ff, 0x64e, 0x40, 0x0, 0x10001, 0x7fffffff, 0x7, 0xda3, 0x4, 0x376d7044, 0xf2a2, 0x1000, 0xff, 0x1, 0x8, 0x6, 0x7f, 0x8, 0x3f, 0x0, 0x57, 0x1, 0x7, 0x4, 0x7, 0x7, 0xfff, 0x8, 0x5bcf, 0x3ff, 0x300, 0x40000000, 0x1522, 0x100, 0x9, 0xfffffffb, 0x3ff, 0x30b, 0x6, 0xfff, 0x2, 0x39fa, 0x6, 0x3, 0x8, 0x7, 0x7, 0x5, 0x6, 0x80, 0x3, 0x1ff, 0x6, 0x7, 0xffffffff, 0x4, 0x4, 0xffffff80, 0x3, 0x9, 0xff, 0x6a, 0x8, 0x29, 0x1, 0x6, 0x2, 0x9, 0x6, 0x7, 0xffff, 0x80, 0xfff, 0xffe00000, 0x80000001, 0x10001, 0x1ff, 0xfff, 0xfff, 0x0, 0x7fffffff, 0x800, 0x9, 0x1, 0xfffffffb, 0x80000000, 0x2, 0x646, 0x3, 0x0, 0x3, 0x7, 0x6, 0x1, 0x1, 0x54aa, 0xfffffff7, 0x6, 0x80000001, 0x1, 0x0, 0x1, 0x9, 0x5849, 0x1f, 0x97af, 0x0, 0x60, 0x4, 0x8, 0x4, 0x9, 0x6, 0xfffffa03, 0x800, 0x5fbeaa1a, 0x80000001, 0x0, 0xfffffffd, 0x4, 0x101, 0xdd3f, 0x6, 0x6, 0x483, 0x6, 0x9, 0x9, 0xfff, 0x1, 0x0, 0x6, 0x7, 0x2, 0x4, 0x0, 0x20, 0x60, 0xaaa, 0x9, 0x40, 0x10000, 0x0, 0xf0000000, 0x7fffffff, 0x5, 0x101, 0x6, 0x7ff, 0x101, 0x9798, 0x2, 0x7fff, 0x10001, 0x8001, 0x4, 0x7, 0x18, 0x8, 0xd95a, 0x4, 0x7, 0x8, 0xb282, 0x1, 0x0, 0x6, 0x4, 0xb3f, 0x380, 0x8000, 0x3, 0x0, 0xb03, 0x0, 0x80000000, 0x8001, 0x2, 0x0, 0x7f, 0x6, 0x4, 0x2, 0x5, 0xc7, 0x1f, 0x0, 0x81, 0xffffffff, 0x80000000, 0x9, 0xffffffff, 0x80000000, 0x7fffffff, 0x4, 0x20, 0xcf0, 0xe80c, 0x8, 0x6, 0x1000, 0x78, 0x4, 0x5, 0x6, 0xc67, 0x9, 0x81, 0x5, 0x5, 0xf4, 0x977b, 0x3ff, 0x9, 0x8000, 0xff, 0x5, 0xded5, 0x3, 0x800, 0x3, 0x1, 0x4, 0x4, 0xc9c, 0x7, 0x7fd, 0xa4a1, 0x3, 0x6, 0x2, 0x5c, 0x7, 0x2, 0x2, 0x10000, 0x400, 0x800, 0x8, 0x0, 0x1, 0x80000, 0x7, 0x478, 0x100, 0x1f, 0x8, 0x6, 0xff, 0x1, 0xffff, 0x1, 0x7, 0x403a, 0x3ff, 0xffff, 0x81, 0xe0, 0x8, 0x1000, 0x8, 0x831f, 0x9046, 0x6, 0x40, 0x5cfc, 0xfffffff8, 0x9, 0x9dc, 0x3, 0x7fffffff, 0x80, 0x7, 0x1, 0x4486, 0x1, 0x5, 0x8, 0x1ff, 0x1, 0x9, 0x8, 0x2, 0x7ff, 0x26, 0x0, 0x4ff5, 0x40, 0x7, 0x8, 0x8, 0x1ff, 0x7, 0x4, 0x1f, 0x1000, 0x590, 0x3, 0x81, 0xffff, 0x4, 0x2, 0xc9d1, 0x0, 0x2, 0x7fffffff, 0x8, 0x6, 0x6, 0x5, 0x8bdd, 0x6, 0x101, 0x6c325de4, 0x4, 0x7f, 0xfffffff7, 0x4, 0x200, 0x40, 0x3f, 0x6, 0x101, 0x2, 0x401, 0xfc0000, 0x3, 0x74, 0x7, 0xffff845a, 0x38000000, 0x7, 0xffffff92, 0x4, 0x0, 0x2, 0x400bcb26, 0x100, 0x1, 0x3, 0x1, 0x5f63, 0x1, 0x2, 0x80000001, 0x6, 0xff, 0x1000, 0x40, 0x3b, 0x9, 0x8, 0x87f4, 0x3, 0xd34, 0x20, 0xfffffffc, 0x1f, 0x3ff, 0x0, 0x7, 0x3, 0x6, 0xbfd, 0xfffffe01, 0x49536275, 0x7fffffff, 0x4, 0xb9e, 0x1, 0x3, 0x1, 0x89a, 0xfffffffd, 0x13, 0x1, 0x9958, 0x2, 0x5, 0x81, 0x5, 0x3, 0x40, 0x41, 0x2, 0x1, 0x9, 0x1, 0x5f, 0x23, 0x20, 0x8, 0x15d, 0xff, 0x6, 0x7f, 0x7, 0x8, 0x8000, 0x80000001, 0x0, 0x2, 0x3f, 0x1369, 0x1, 0x2, 0x9, 0x401, 0x7f, 0x6, 0x8, 0x1, 0xa92, 0x10a, 0x1, 0x0, 0x14000, 0x2, 0x1, 0x10000, 0x0, 0xfffffff7, 0x2, 0x5, 0xdbcc, 0x9, 0x5, 0x4, 0x2, 0x4, 0x2, 0x2, 0xfffffffc, 0x20, 0x6, 0x1, 0x2, 0x5, 0x7fffffff, 0x5, 0x4dba, 0x2, 0x4, 0x3, 0x7, 0xc1, 0x8, 0x97, 0xfffffff7, 0x7fffffff, 0x0, 0x100, 0x5, 0x8, 0x4, 0x2, 0x1000, 0x3, 0x100, 0xef7d, 0x9, 0x9, 0x8000, 0x400, 0x7f, 0xffffffff, 0xe4, 0x3, 0x200, 0x80, 0x7ff, 0x4, 0x32, 0x8, 0x5, 0x8001, 0xffff8000, 0x400, 0x0, 0x8, 0x83, 0x8, 0x3ff, 0x8000, 0x1, 0xffff, 0x6, 0x52, 0x658]}) 23:01:44 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) accept$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040054) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@local, @in=@multicast2}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000ac0)=0xe8) 23:01:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) socket$inet6(0xa, 0x4, 0x5) [ 2402.537171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2402.544823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:01:45 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}}, 0x4) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) syz_open_dev$hiddev(&(0x7f00000007c0), 0x8, 0x200) 23:01:45 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) 23:01:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) 23:01:45 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) accept$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x1c) 23:01:45 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) accept$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040054) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@local, @in=@multicast2}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000ac0)=0xe8) 23:01:45 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500)=0x0, &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000680)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x4, 0x2, {0x0, r0}, 0x1c, 0x0, 0x0, {0x0, 0x0, r1}}, 0x10000) 23:01:45 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x4090) openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) 23:01:45 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x0, 0x0}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:01:45 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}}, 0x4) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) 23:01:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 23:01:45 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)) [ 2403.225809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2403.229715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:01:53 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)) syz_io_uring_setup(0x6caa, &(0x7f0000000580)={0x0, 0xbff4, 0x20, 0x0, 0x373}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 23:01:53 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) 23:01:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 23:01:53 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x2c}}, 0x4) syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) 23:01:53 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 23:01:53 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r5) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x4090) 23:01:53 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) accept$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040054) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@local, @in=@multicast2}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000ac0)=0xe8) 23:01:53 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x2, &(0x7f0000000ac0)=@string={0x2}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4b84877cdd6e5e8"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) [ 2411.245169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2411.251865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:01:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) 23:01:53 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) 23:01:53 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 23:01:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) 23:01:53 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) 23:01:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) 23:02:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) 23:02:02 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) 23:02:02 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x2, &(0x7f0000000ac0)=@string={0x2}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:02:02 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r5) 23:02:02 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) accept$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040054) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 23:02:02 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) 23:02:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) 23:02:02 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) [ 2420.079886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2420.091035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:02:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) 23:02:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) 23:02:02 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) 23:02:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) 23:02:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) 23:02:02 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c1) syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) 23:02:02 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) accept$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040054) 23:02:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) 23:02:11 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) 23:02:11 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) socket$nl_generic(0x10, 0x3, 0x10) 23:02:11 executing program 0: socket$inet6(0xa, 0x3, 0x8000) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) 23:02:11 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[0xffffffffffffffff]}, 0x1) 23:02:11 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x2, &(0x7f0000000ac0)=@string={0x2}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:02:11 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) accept$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x1c) socket$nl_generic(0x10, 0x3, 0x10) 23:02:11 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) 23:02:11 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) [ 2429.528899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2429.532359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:02:12 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) 23:02:12 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[0xffffffffffffffff]}, 0x1) 23:02:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) 23:02:12 executing program 0: bind$inet6(0xffffffffffffffff, 0x0, 0x0) 23:02:12 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0xc001) syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) 23:02:12 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) accept$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x1c) 23:02:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8000) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) 23:02:12 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000280)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r2, 0x29, 0x3, 0x3f, 0x10000, 0x61, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x20, 0x7ff, 0x2}}) r3 = syz_open_dev$hiddev(&(0x7f0000000380), 0x1, 0x2) ioctl$HIDIOCGFIELDINFO(r3, 0xc038480a, &(0x7f00000003c0)={0x1, 0x2, 0xb2, 0x3, 0x10001, 0x81, 0x1000, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3, 0x2}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[r3]}, 0x1) syz_io_uring_setup(0x7fe2, &(0x7f0000000480)={0x0, 0x9e83, 0x10, 0x1, 0x303}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 23:02:20 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x20008001) syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) 23:02:20 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) accept$inet6(r3, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000780)=0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040054) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@local, @in=@multicast2}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000ac0)=0xe8) 23:02:20 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) 23:02:20 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[0xffffffffffffffff]}, 0x1) 23:02:20 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0xa, &(0x7f0000000ac0)=@string={0xa, 0x3, "837fc8a0df3f8cfc"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:02:20 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) 23:02:20 executing program 2: socket$inet6(0xa, 0x3, 0x8000) 23:02:20 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00'}) 23:02:20 executing program 1: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) [ 2438.455324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2438.461319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:02:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x1, 0x1, 0x52, @empty, @mcast1, 0x0, 0x38, 0x8, 0x5}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[0xffffffffffffffff]}, 0x1) 23:02:21 executing program 2: socket$inet6(0xa, 0x0, 0x8000) 23:02:21 executing program 1: syz_open_dev$hiddev(&(0x7f0000000780), 0x8, 0xc00) 23:02:21 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000580)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 23:02:21 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[0xffffffffffffffff]}, 0x1) 23:02:21 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) 23:02:21 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) 23:02:21 executing program 2: socket$inet6(0xa, 0x0, 0x0) 23:02:21 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x10) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000600)={0x0, {{0xa, 0x4e24, 0xfffffff8, @local, 0x9}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x24}, 0x20}}}, 0x108) 23:02:21 executing program 1: syz_open_dev$hiddev(0x0, 0x8, 0xc00) 23:02:21 executing program 3: socket$inet6(0xa, 0x3, 0x8000) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[0xffffffffffffffff]}, 0x1) 23:02:21 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0xa, &(0x7f0000000ac0)=@string={0xa, 0x3, "837fc8a0df3f8cfc"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:02:21 executing program 1: syz_open_dev$hiddev(0x0, 0x8, 0xc00) [ 2439.266912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2439.288576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:02:30 executing program 3: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000440)={0xfffffffd, 0x0, &(0x7f0000000400)=[0xffffffffffffffff]}, 0x1) 23:02:30 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) 23:02:30 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000940)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}) 23:02:30 executing program 1: syz_open_dev$hiddev(0x0, 0x8, 0xc00) 23:02:30 executing program 2: socket$inet6(0xa, 0x0, 0x0) 23:02:30 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) 23:02:30 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0xa, &(0x7f0000000ac0)=@string={0xa, 0x3, "837fc8a0df3f8cfc"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:02:30 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) socket$nl_generic(0x10, 0x3, 0x10) 23:02:30 executing program 3: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) [ 2447.689621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2447.693351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:02:30 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000940)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}) 23:02:30 executing program 1: syz_open_dev$hiddev(&(0x7f0000000780), 0x0, 0xc00) 23:02:30 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) socketpair(0x1e, 0x800, 0x2c7, &(0x7f0000000440)) 23:02:30 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000940)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}) 23:02:30 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000940)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}) 23:02:30 executing program 1: syz_open_dev$hiddev(&(0x7f0000000780), 0x0, 0x0) 23:02:30 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000004c0)={@mcast2, 0x37}) 23:02:30 executing program 2: socket$inet6(0xa, 0x0, 0x0) 23:02:39 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) [ 2456.954269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2456.955351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:02:39 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0xe, &(0x7f0000000ac0)=@string={0xe, 0x3, "837fc8a0df3f8cfc11bba6d9"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4b84877cdd6e5e8"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:02:39 executing program 1: syz_open_dev$hiddev(&(0x7f0000000780), 0x0, 0x0) 23:02:39 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000940)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}) 23:02:39 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) 23:02:39 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r4, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x80) 23:02:39 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000940)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}) 23:02:39 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000940)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}) 23:02:39 executing program 1: syz_open_dev$hiddev(&(0x7f0000000780), 0x0, 0x0) 23:02:39 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000940)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}) 23:02:39 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) 23:02:39 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) socket$inet6_udplite(0xa, 0x2, 0x88) 23:02:48 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0x0, @remote, 0x4d}, {0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x3ff, [0x7, 0x7fff, 0x100, 0x4316b70a, 0x4, 0x3, 0x9, 0x6]}, 0x5c) 23:02:48 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000940)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}) 23:02:48 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) 23:02:48 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000940)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}) 23:02:48 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000940)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}) 23:02:48 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) 23:02:49 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x40041) 23:02:49 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0xe, &(0x7f0000000ac0)=@string={0xe, 0x3, "837fc8a0df3f8cfc11bba6d9"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) [ 2466.640277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2466.651365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:02:49 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x40000) 23:02:49 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) 23:02:49 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000940)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}) 23:02:49 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 23:02:49 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000940)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}) 23:02:49 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) 23:02:49 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) 23:02:49 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 23:02:49 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000940)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}) 23:02:49 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0xe, &(0x7f0000000ac0)=@string={0xe, 0x3, "837fc8a0df3f8cfc11bba6d9"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) [ 2467.380020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2467.384528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:02:58 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) 23:02:58 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) 23:02:58 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x10, &(0x7f0000000ac0)=@string={0x10, 0x3, "837fc8a0df3f8cfc11bba6d9b52a"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:02:58 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 23:02:58 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) 23:02:58 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)) 23:02:58 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) 23:02:58 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) [ 2476.291368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2476.296616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:02:58 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 23:02:58 executing program 5: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 23:02:59 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)) 23:02:59 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) 23:02:59 executing program 5: setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000180), 0x4) 23:02:59 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x80}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x91}, 0x40) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) 23:02:59 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) 23:02:59 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) 23:03:07 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) 23:03:07 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) 23:03:07 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:07 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)) 23:03:07 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x10, &(0x7f0000000ac0)=@string={0x10, 0x3, "837fc8a0df3f8cfc11bba6d9b52a"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4b84877cdd6e5e8"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:03:07 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0xfc, 0x7, 0x43, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x80, 0x1, 0x4, 0x5}}) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) 23:03:07 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)) 23:03:07 executing program 5: setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) [ 2485.437525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2485.440536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:03:16 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:16 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x10, &(0x7f0000000ac0)=@string={0x10, 0x3, "837fc8a0df3f8cfc11bba6d9b52a"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:03:16 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:16 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)) 23:03:16 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) 23:03:16 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) 23:03:16 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) 23:03:16 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) [ 2494.169574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2494.202349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:03:17 executing program 4: arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) 23:03:17 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) 23:03:17 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:17 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) 23:03:17 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:17 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:17 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) 23:03:17 executing program 4: arch_prctl$ARCH_SET_GS(0x1001, 0x0) 23:03:26 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)) 23:03:26 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:26 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) 23:03:26 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) [ 2504.008703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2504.015198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:03:26 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:26 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) 23:03:26 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x11, &(0x7f0000000ac0)=@string={0x11, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:03:26 executing program 4: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) 23:03:26 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) 23:03:26 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) 23:03:26 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) 23:03:26 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) 23:03:26 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:26 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:26 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x80800) socketpair(0x1a, 0x3, 0xf4, &(0x7f00000000c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @remote, 0x3}, 0x1c) socketpair(0x0, 0x4, 0x4, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) 23:03:27 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long}, 0x14) 23:03:27 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x11, &(0x7f0000000ac0)=@string={0x11, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) [ 2504.730137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 23:03:27 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r6 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000380), 0x4) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) [ 2504.740043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:03:27 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) 23:03:27 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r8, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:34 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) 23:03:34 executing program 7: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x14) 23:03:34 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x11, &(0x7f0000000ac0)=@string={0x11, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) 23:03:34 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r6 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000380), 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:34 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:34 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) memfd_secret(0x80000) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) 23:03:34 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) 23:03:34 executing program 4: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000940)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}) [ 2512.427303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2512.437713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:03:35 executing program 7: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x14) 23:03:35 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) memfd_secret(0x80000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:35 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000940)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}) 23:03:35 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r6 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000380), 0x4) 23:03:35 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) 23:03:35 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) 23:03:35 executing program 4: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000940)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}) 23:03:35 executing program 7: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x14) 23:03:35 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r6 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000380), 0x4) 23:03:44 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) memfd_secret(0x80000) 23:03:44 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) memfd_secret(0x80000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:44 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) memfd_secret(0x80000) 23:03:44 executing program 4: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000940)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2f}) 23:03:44 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(0x0, r0) 23:03:44 executing program 7: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x14) 23:03:44 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) 23:03:44 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:44 executing program 7: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x14) [ 2521.651005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2521.656615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:03:44 executing program 7: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x14) 23:03:44 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) 23:03:44 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) 23:03:44 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:44 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) 23:03:44 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) 23:03:44 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) 23:03:44 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) memfd_secret(0x80000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:44 executing program 4: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) 23:03:44 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) 23:03:44 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) memfd_secret(0x80000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:52 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) memfd_secret(0x80000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:52 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) 23:03:52 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) 23:03:52 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) 23:03:52 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) 23:03:52 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(0x0, r0) 23:03:52 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:52 executing program 4: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff00000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044810) 23:03:52 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) [ 2529.839099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2529.848306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:03:52 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r2 = accept$inet6(r1, 0x0, &(0x7f00000000c0)) accept4$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) 23:03:52 executing program 7: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, 0x0, 0x0) 23:03:52 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) memfd_secret(0x80000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:03:52 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) 23:03:52 executing program 7: bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) 23:04:00 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:00 executing program 4: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)) 23:04:00 executing program 6: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4b84877cdd6e5e8"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(0x0, r0) 23:04:00 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r2 = accept$inet6(r1, 0x0, &(0x7f00000000c0)) r3 = accept4$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) 23:04:00 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r2 = accept$inet6(r1, 0x0, &(0x7f00000000c0)) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) 23:04:00 executing program 7: bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) 23:04:00 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) 23:04:00 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) memfd_secret(0x80000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:00 executing program 7: bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) [ 2538.239486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2538.253298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:04:00 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) accept$inet6(r1, 0x0, &(0x7f00000000c0)) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) 23:04:10 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r2 = accept$inet6(r1, 0x0, &(0x7f00000000c0)) accept4$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:10 executing program 7: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) 23:04:10 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) 23:04:10 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) 23:04:10 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) 23:04:10 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:10 executing program 4: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) 23:04:10 executing program 6: memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), 0xffffffffffffffff) [ 2547.796454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2547.807520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:04:10 executing program 7: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) 23:04:10 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) accept$inet6(r1, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:10 executing program 2: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) 23:04:10 executing program 0: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) 23:04:10 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:10 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r2 = accept$inet6(r1, 0x0, &(0x7f00000000c0)) accept4$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) 23:04:10 executing program 4: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:10 executing program 7: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) 23:04:10 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:10 executing program 7: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(0x0, r0) 23:04:10 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) 23:04:10 executing program 2: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) [ 2548.536823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2548.552243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:04:11 executing program 4: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) 23:04:20 executing program 0: connect$inet6(0xffffffffffffffff, 0x0, 0x0) 23:04:20 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) accept$inet6(r1, 0x0, &(0x7f00000000c0)) 23:04:20 executing program 7: r0 = memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4b84877cdd6e5e8"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(0x0, r0) 23:04:20 executing program 4: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e24, 0x7, @private2, 0x1}, 0x1c) 23:04:20 executing program 6: memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), 0xffffffffffffffff) 23:04:20 executing program 2: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000200)) 23:04:20 executing program 3: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:20 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) [ 2557.930517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2557.934778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2557.937543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2557.970184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:04:20 executing program 2: getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) 23:04:20 executing program 0: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x24000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x16}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc81}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b017ba963767f5d}, 0x10) r3 = memfd_secret(0x80000) bind$802154_raw(r3, &(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0xcdb3497cde600d27, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8004) 23:04:20 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:20 executing program 1: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 23:04:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:20 executing program 2: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x24000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x16}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc81}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b017ba963767f5d}, 0x10) r3 = memfd_secret(0x80000) bind$802154_raw(r3, &(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0xcdb3497cde600d27, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8004) 23:04:20 executing program 4: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r8, 0x4, 0xeb, 0x8, 0x80, 0x25, @loopback, @remote, 0x40, 0x7, 0x0, 0x4462}}) 23:04:20 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:20 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r2 = accept$inet6(r1, 0x0, &(0x7f00000000c0)) accept4$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:20 executing program 1: accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 23:04:30 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) accept$inet6(r1, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:30 executing program 0: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x24000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x16}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc81}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b017ba963767f5d}, 0x10) r3 = memfd_secret(0x80000) bind$802154_raw(r3, &(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0xcdb3497cde600d27, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8004) 23:04:30 executing program 4: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r6, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r7 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', r5, 0x2f, 0x3, 0xcb, 0x7, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x40, 0x3, 0x4}}) 23:04:30 executing program 6: memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x0, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_genetlink_get_family_id$batadv(&(0x7f0000001180), 0xffffffffffffffff) 23:04:30 executing program 7: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x24000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x16}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc81}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b017ba963767f5d}, 0x10) r3 = memfd_secret(0x80000) bind$802154_raw(r3, &(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0xcdb3497cde600d27, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8004) 23:04:30 executing program 2: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x24000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x16}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc81}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b017ba963767f5d}, 0x10) r3 = memfd_secret(0x80000) bind$802154_raw(r3, &(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0xcdb3497cde600d27, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8004) 23:04:30 executing program 1: accept$inet6(0xffffffffffffffff, 0x0, 0x0) 23:04:30 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) [ 2567.871436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2567.878637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:04:39 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:39 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:39 executing program 6: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000900)={@multicast1, @multicast2, r4}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_usb_connect$cdc_ncm(0x5, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x3ff, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000e00)={0x14, &(0x7f0000000d40)={0x20, 0x24, 0x4b, {0x4b, 0xa, "bc8fa6d9b1b98f8fae26ec166f817f22f15ab0f6ffeb64492c6356d38f63da2c86a6718fa2c4c1abcbf6d087957518585224bfca5441310bb129d8838431716c209b5f72725ea7a35c"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000010c0)={0x44, &(0x7f0000000e40)={0x0, 0x7, 0xa0, "20a23e6a6d55ee35c4674306ce5c20cbe785ed77280325f7893944a74894db34b076cb3641ae2c6ce45c7ca0fd792c23ef1e804981b3f5aaed96d05a9409c099340de0759d491cd0eecc305649f55d621299293de848e5a8e7e27b3999f63f014256be861abb47adcdf8f3a7f72f62df4c041ffbfcb0c1702a3e6e98d4688f494b0d36bf693b5549e6d2e99eee16822648ce429bd2e8e846247bebee8a8b8307"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000f80)={0x20, 0x80, 0x1c, {0x3ff, 0x0, 0x8, 0x3, 0x9, 0x2, 0x9, 0xffffffff, 0x7, 0x8, 0x5, 0x6}}, &(0x7f0000000fc0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000001000)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001040)={0x20, 0x87, 0x2, 0x200}, &(0x7f0000001080)={0x20, 0x89, 0x2, 0x1}}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x440c4) 23:04:39 executing program 7: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x24000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x16}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc81}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b017ba963767f5d}, 0x10) r3 = memfd_secret(0x80000) bind$802154_raw(r3, &(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0xcdb3497cde600d27, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8004) 23:04:39 executing program 0: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x24000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x16}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc81}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b017ba963767f5d}, 0x10) r3 = memfd_secret(0x80000) bind$802154_raw(r3, &(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0xcdb3497cde600d27, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8004) 23:04:39 executing program 4: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) r6 = memfd_secret(0x80000) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000380), 0x4) 23:04:39 executing program 1: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x24000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x16}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc81}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b017ba963767f5d}, 0x10) r3 = memfd_secret(0x80000) bind$802154_raw(r3, &(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0xcdb3497cde600d27, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8004) 23:04:39 executing program 2: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x24000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x16}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc81}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b017ba963767f5d}, 0x10) r3 = memfd_secret(0x80000) bind$802154_raw(r3, &(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0xcdb3497cde600d27, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8004) [ 2576.675770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2576.706225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:04:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0) 23:04:39 executing program 5: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:39 executing program 4: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) memfd_secret(0x80000) 23:04:39 executing program 0: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000900)={@multicast1, @multicast2, r4}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_usb_connect$cdc_ncm(0x5, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x3ff, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000e00)={0x14, &(0x7f0000000d40)={0x20, 0x24, 0x4b, {0x4b, 0xa, "bc8fa6d9b1b98f8fae26ec166f817f22f15ab0f6ffeb64492c6356d38f63da2c86a6718fa2c4c1abcbf6d087957518585224bfca5441310bb129d8838431716c209b5f72725ea7a35c"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000010c0)={0x44, &(0x7f0000000e40)={0x0, 0x7, 0xa0, "20a23e6a6d55ee35c4674306ce5c20cbe785ed77280325f7893944a74894db34b076cb3641ae2c6ce45c7ca0fd792c23ef1e804981b3f5aaed96d05a9409c099340de0759d491cd0eecc305649f55d621299293de848e5a8e7e27b3999f63f014256be861abb47adcdf8f3a7f72f62df4c041ffbfcb0c1702a3e6e98d4688f494b0d36bf693b5549e6d2e99eee16822648ce429bd2e8e846247bebee8a8b8307"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000f80)={0x20, 0x80, 0x1c, {0x3ff, 0x0, 0x8, 0x3, 0x9, 0x2, 0x9, 0xffffffff, 0x7, 0x8, 0x5, 0x6}}, &(0x7f0000000fc0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000001000)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001040)={0x20, 0x87, 0x2, 0x200}, &(0x7f0000001080)={0x20, 0x89, 0x2, 0x1}}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x440c4) 23:04:39 executing program 2: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x24000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x16}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc81}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b017ba963767f5d}, 0x10) r3 = memfd_secret(0x80000) bind$802154_raw(r3, &(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0xcdb3497cde600d27, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8004) 23:04:39 executing program 3: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000900)={@multicast1, @multicast2, r4}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_usb_connect$cdc_ncm(0x5, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x3ff, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4b84877cdd6e5e8"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000e00)={0x14, &(0x7f0000000d40)={0x20, 0x24, 0x4b, {0x4b, 0xa, "bc8fa6d9b1b98f8fae26ec166f817f22f15ab0f6ffeb64492c6356d38f63da2c86a6718fa2c4c1abcbf6d087957518585224bfca5441310bb129d8838431716c209b5f72725ea7a35c"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000010c0)={0x44, &(0x7f0000000e40)={0x0, 0x7, 0xa0, "20a23e6a6d55ee35c4674306ce5c20cbe785ed77280325f7893944a74894db34b076cb3641ae2c6ce45c7ca0fd792c23ef1e804981b3f5aaed96d05a9409c099340de0759d491cd0eecc305649f55d621299293de848e5a8e7e27b3999f63f014256be861abb47adcdf8f3a7f72f62df4c041ffbfcb0c1702a3e6e98d4688f494b0d36bf693b5549e6d2e99eee16822648ce429bd2e8e846247bebee8a8b8307"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000f80)={0x20, 0x80, 0x1c, {0x3ff, 0x0, 0x8, 0x3, 0x9, 0x2, 0x9, 0xffffffff, 0x7, 0x8, 0x5, 0x6}}, &(0x7f0000000fc0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000001000)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001040)={0x20, 0x87, 0x2, 0x200}, &(0x7f0000001080)={0x20, 0x89, 0x2, 0x1}}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x440c4) [ 2577.151546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2577.164259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:04:39 executing program 1: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000900)={@multicast1, @multicast2, r4}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_usb_connect$cdc_ncm(0x5, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x3ff, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000e00)={0x14, &(0x7f0000000d40)={0x20, 0x24, 0x4b, {0x4b, 0xa, "bc8fa6d9b1b98f8fae26ec166f817f22f15ab0f6ffeb64492c6356d38f63da2c86a6718fa2c4c1abcbf6d087957518585224bfca5441310bb129d8838431716c209b5f72725ea7a35c"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000010c0)={0x44, &(0x7f0000000e40)={0x0, 0x7, 0xa0, "20a23e6a6d55ee35c4674306ce5c20cbe785ed77280325f7893944a74894db34b076cb3641ae2c6ce45c7ca0fd792c23ef1e804981b3f5aaed96d05a9409c099340de0759d491cd0eecc305649f55d621299293de848e5a8e7e27b3999f63f014256be861abb47adcdf8f3a7f72f62df4c041ffbfcb0c1702a3e6e98d4688f494b0d36bf693b5549e6d2e99eee16822648ce429bd2e8e846247bebee8a8b8307"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000f80)={0x20, 0x80, 0x1c, {0x3ff, 0x0, 0x8, 0x3, 0x9, 0x2, 0x9, 0xffffffff, 0x7, 0x8, 0x5, 0x6}}, &(0x7f0000000fc0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000001000)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001040)={0x20, 0x87, 0x2, 0x200}, &(0x7f0000001080)={0x20, 0x89, 0x2, 0x1}}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x440c4) 23:04:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:39 executing program 7: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x24000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x16}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc81}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b017ba963767f5d}, 0x10) r3 = memfd_secret(0x80000) bind$802154_raw(r3, &(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0xcdb3497cde600d27, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8004) [ 2577.276787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2577.293875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2577.343480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 23:04:39 executing program 6: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000900)={@multicast1, @multicast2, r4}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_usb_connect$cdc_ncm(0x5, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x3ff, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000e00)={0x14, &(0x7f0000000d40)={0x20, 0x24, 0x4b, {0x4b, 0xa, "bc8fa6d9b1b98f8fae26ec166f817f22f15ab0f6ffeb64492c6356d38f63da2c86a6718fa2c4c1abcbf6d087957518585224bfca5441310bb129d8838431716c209b5f72725ea7a35c"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000010c0)={0x44, &(0x7f0000000e40)={0x0, 0x7, 0xa0, "20a23e6a6d55ee35c4674306ce5c20cbe785ed77280325f7893944a74894db34b076cb3641ae2c6ce45c7ca0fd792c23ef1e804981b3f5aaed96d05a9409c099340de0759d491cd0eecc305649f55d621299293de848e5a8e7e27b3999f63f014256be861abb47adcdf8f3a7f72f62df4c041ffbfcb0c1702a3e6e98d4688f494b0d36bf693b5549e6d2e99eee16822648ce429bd2e8e846247bebee8a8b8307"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000f80)={0x20, 0x80, 0x1c, {0x3ff, 0x0, 0x8, 0x3, 0x9, 0x2, 0x9, 0xffffffff, 0x7, 0x8, 0x5, 0x6}}, &(0x7f0000000fc0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000001000)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001040)={0x20, 0x87, 0x2, 0x200}, &(0x7f0000001080)={0x20, 0x89, 0x2, 0x1}}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x440c4) 23:04:39 executing program 4: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100}, 0x40800) [ 2577.352264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:04:39 executing program 2: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x24000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x16}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc81}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b017ba963767f5d}, 0x10) r3 = memfd_secret(0x80000) bind$802154_raw(r3, &(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0xcdb3497cde600d27, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) [ 2577.434596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy ** 1 printk messages dropped ** [ 2577.437599] ------------[ cut here ]------------ [ 2577.437654] WARNING: kernel/printk/printk_ringbuffer.c:1278 at get_data+0x364/0x400, CPU#1: syz-executor.6/18342 [ 2577.437730] Modules linked in: [ 2577.437761] CPU: 1 UID: 0 PID: 18342 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251104 #1 PREEMPT(voluntary) [ 2577.437790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2577.437804] RIP: 0010:get_data+0x364/0x400 [ 2577.437839] Code: e8 83 e0 07 83 c0 03 38 d0 0f 8c be fe ff ff 84 d2 0f 84 b6 fe ff ff 48 89 ef e8 d7 f1 5b 00 e9 a9 fe ff ff e8 3d f2 1e 00 90 <0f> 0b 90 45 31 e4 e9 3b ff ff ff e8 2c f2 1e 00 90 0f 0b 90 45 31 [ 2577.437862] RSP: 0018:ffff8880175ef540 EFLAGS: 00010016 [ 2577.437881] RAX: 0000000000003c45 RBX: ffff8880175ef658 RCX: ffffc9000a463000 [ 2577.437897] RDX: 0000000000040000 RSI: ffffffff81559633 RDI: 0000000000000006 [ 2577.437912] RBP: ffff8880175ef620 R08: 0000000000000000 R09: 0000000000000000 [ 2577.437926] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff85d2e3d0 [ 2577.437941] R13: 00003fffffffffff R14: 0000000000000000 R15: 0000000000000000 [ 2577.437968] FS: 00007f7711ec0700(0000) GS:ffff8880e54a8000(0000) knlGS:0000000000000000 [ 2577.437990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2577.438006] CR2: 0000556d1f124058 CR3: 000000000e6b4000 CR4: 0000000000350ef0 [ 2577.438021] Call Trace: [ 2577.438028] [ 2577.438043] _prb_read_valid+0x2f3/0x830 [ 2577.438090] ? __pfx__prb_read_valid+0x10/0x10 [ 2577.438126] ? desc_read+0x285/0x350 [ 2577.438165] ? desc_read_finalized_seq+0x129/0x1c0 [ 2577.438201] ? __asan_memcpy+0x3d/0x60 [ 2577.438242] prb_read_valid+0x78/0xa0 [ 2577.438279] ? __pfx_prb_read_valid+0x10/0x10 [ 2577.438314] ? _prb_read_valid+0x6e9/0x830 [ 2577.438356] printk_get_next_message+0x10b/0x570 [ 2577.438383] ? __pfx__prb_read_valid+0x10/0x10 [ 2577.438419] ? __pfx_printk_get_next_message+0x10/0x10 [ 2577.438447] ? __lock_acquire+0x694/0x1b70 [ 2577.438493] ? lock_acquire+0x15e/0x2f0 [ 2577.438525] ? console_flush_one_record+0x100/0xb20 [ 2577.438556] ? lock_is_held_type+0x9e/0x120 [ 2577.438587] console_flush_one_record+0x64f/0xb20 [ 2577.438620] ? __pfx_console_flush_one_record+0x10/0x10 [ 2577.438649] ? __lock_acquire+0x694/0x1b70 [ 2577.438688] ? do_raw_spin_lock+0x123/0x260 [ 2577.438715] __console_flush_and_unlock+0xb1/0x1d0 [ 2577.438741] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 2577.438769] ? do_raw_spin_unlock+0x53/0x220 [ 2577.438793] ? is_printk_cpu_sync_owner+0x32/0x40 [ 2577.438822] ? is_printk_legacy_deferred+0x67/0x80 [ 2577.438855] vprintk_emit+0x4c1/0x690 [ 2577.438883] ? __pfx_vprintk_emit+0x10/0x10 [ 2577.438908] ? do_syscall_64+0xbf/0x3f0 [ 2577.438939] ? __lock_acquire+0x694/0x1b70 [ 2577.438981] dev_printk_emit+0xd9/0x120 [ 2577.439020] ? __pfx_dev_printk_emit+0x10/0x10 [ 2577.439055] ? lock_acquire+0x15e/0x2f0 [ 2577.439090] ? find_held_lock+0x2b/0x80 [ 2577.439114] ? __virt_addr_valid+0x2e8/0x5d0 [ 2577.439147] ? __virt_addr_valid+0x100/0x5d0 [ 2577.439180] __dev_printk+0xf8/0x270 [ 2577.439204] _dev_err+0xdb/0x120 [ 2577.439226] ? __pfx__dev_err+0x10/0x10 [ 2577.439251] ? do_raw_spin_lock+0x123/0x260 [ 2577.439274] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2577.439298] ? bus_remove_driver+0x16a/0x1e0 [ 2577.439343] raw_ioctl+0x1ac8/0x21a0 [ 2577.439376] ? lock_release+0xc8/0x290 [ 2577.439413] ? __pfx_raw_ioctl+0x10/0x10 [ 2577.439447] ? selinux_file_ioctl+0xb9/0x280 [ 2577.439483] ? __pfx_raw_ioctl+0x10/0x10 [ 2577.439517] __x64_sys_ioctl+0x18f/0x210 [ 2577.439548] do_syscall_64+0xbf/0x3f0 [ 2577.439579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2577.439602] RIP: 0033:0x7f771494a8d7 [ 2577.439620] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 54 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2577.439642] RSP: 002b:00007f7711ebe0b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2577.439664] RAX: ffffffffffffffda RBX: 00007f7711ebf130 RCX: 00007f771494a8d7 [ 2577.439679] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 2577.439694] RBP: 0000000000000008 R08: 000000000000ffff R09: 000000000000000b [ 2577.439708] R10: 00007f7711ebe180 R11: 0000000000000246 R12: 0000000000000000 [ 2577.439722] R13: 0000000020000cc0 R14: 0000000020000940 R15: 0000000000000000 [ 2577.439753] [ 2577.439761] irq event stamp: 972 [ 2577.439769] hardirqs last enabled at (971): [] kasan_quarantine_put+0x84/0x1e0 [ 2577.439811] hardirqs last disabled at (972): [] _raw_spin_lock_irqsave+0x53/0x60 [ 2577.439853] softirqs last enabled at (832): [] handle_softirqs+0x50c/0x770 [ 2577.439882] softirqs last disabled at (821): [] __irq_exit_rcu+0xc4/0x100 [ 2577.439910] ---[ end trace 0000000000000000 ]--- 23:04:47 executing program 6: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000900)={@multicast1, @multicast2, r4}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_usb_connect$cdc_ncm(0x5, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x3ff, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4b84877cdd6e5e8"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000e00)={0x14, &(0x7f0000000d40)={0x20, 0x24, 0x4b, {0x4b, 0xa, "bc8fa6d9b1b98f8fae26ec166f817f22f15ab0f6ffeb64492c6356d38f63da2c86a6718fa2c4c1abcbf6d087957518585224bfca5441310bb129d8838431716c209b5f72725ea7a35c"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000010c0)={0x44, &(0x7f0000000e40)={0x0, 0x7, 0xa0, "20a23e6a6d55ee35c4674306ce5c20cbe785ed77280325f7893944a74894db34b076cb3641ae2c6ce45c7ca0fd792c23ef1e804981b3f5aaed96d05a9409c099340de0759d491cd0eecc305649f55d621299293de848e5a8e7e27b3999f63f014256be861abb47adcdf8f3a7f72f62df4c041ffbfcb0c1702a3e6e98d4688f494b0d36bf693b5549e6d2e99eee16822648ce429bd2e8e846247bebee8a8b8307"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000f80)={0x20, 0x80, 0x1c, {0x3ff, 0x0, 0x8, 0x3, 0x9, 0x2, 0x9, 0xffffffff, 0x7, 0x8, 0x5, 0x6}}, &(0x7f0000000fc0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000001000)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001040)={0x20, 0x87, 0x2, 0x200}, &(0x7f0000001080)={0x20, 0x89, 0x2, 0x1}}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x440c4) 23:04:47 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:47 executing program 1: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000900)={@multicast1, @multicast2, r4}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_usb_connect$cdc_ncm(0x5, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x3ff, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4b84877cdd6e5e8"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000e00)={0x14, &(0x7f0000000d40)={0x20, 0x24, 0x4b, {0x4b, 0xa, "bc8fa6d9b1b98f8fae26ec166f817f22f15ab0f6ffeb64492c6356d38f63da2c86a6718fa2c4c1abcbf6d087957518585224bfca5441310bb129d8838431716c209b5f72725ea7a35c"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000010c0)={0x44, &(0x7f0000000e40)={0x0, 0x7, 0xa0, "20a23e6a6d55ee35c4674306ce5c20cbe785ed77280325f7893944a74894db34b076cb3641ae2c6ce45c7ca0fd792c23ef1e804981b3f5aaed96d05a9409c099340de0759d491cd0eecc305649f55d621299293de848e5a8e7e27b3999f63f014256be861abb47adcdf8f3a7f72f62df4c041ffbfcb0c1702a3e6e98d4688f494b0d36bf693b5549e6d2e99eee16822648ce429bd2e8e846247bebee8a8b8307"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000f80)={0x20, 0x80, 0x1c, {0x3ff, 0x0, 0x8, 0x3, 0x9, 0x2, 0x9, 0xffffffff, 0x7, 0x8, 0x5, 0x6}}, &(0x7f0000000fc0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000001000)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001040)={0x20, 0x87, 0x2, 0x200}, &(0x7f0000001080)={0x20, 0x89, 0x2, 0x1}}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x440c4) 23:04:47 executing program 7: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x24000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x16}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc81}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b017ba963767f5d}, 0x10) r3 = memfd_secret(0x80000) bind$802154_raw(r3, &(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0xcdb3497cde600d27, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8004) 23:04:47 executing program 4: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) 23:04:47 executing program 0: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000900)={@multicast1, @multicast2, r4}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_usb_connect$cdc_ncm(0x5, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x3ff, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4b84877cdd6e5e8"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000e00)={0x14, &(0x7f0000000d40)={0x20, 0x24, 0x4b, {0x4b, 0xa, "bc8fa6d9b1b98f8fae26ec166f817f22f15ab0f6ffeb64492c6356d38f63da2c86a6718fa2c4c1abcbf6d087957518585224bfca5441310bb129d8838431716c209b5f72725ea7a35c"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000010c0)={0x44, &(0x7f0000000e40)={0x0, 0x7, 0xa0, "20a23e6a6d55ee35c4674306ce5c20cbe785ed77280325f7893944a74894db34b076cb3641ae2c6ce45c7ca0fd792c23ef1e804981b3f5aaed96d05a9409c099340de0759d491cd0eecc305649f55d621299293de848e5a8e7e27b3999f63f014256be861abb47adcdf8f3a7f72f62df4c041ffbfcb0c1702a3e6e98d4688f494b0d36bf693b5549e6d2e99eee16822648ce429bd2e8e846247bebee8a8b8307"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000f80)={0x20, 0x80, 0x1c, {0x3ff, 0x0, 0x8, 0x3, 0x9, 0x2, 0x9, 0xffffffff, 0x7, 0x8, 0x5, 0x6}}, &(0x7f0000000fc0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000001000)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001040)={0x20, 0x87, 0x2, 0x200}, &(0x7f0000001080)={0x20, 0x89, 0x2, 0x1}}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x440c4) 23:04:47 executing program 2: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x24000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x16}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc81}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b017ba963767f5d}, 0x10) r3 = memfd_secret(0x80000) bind$802154_raw(r3, &(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0xcdb3497cde600d27, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 23:04:47 executing program 3: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000900)={@multicast1, @multicast2, r4}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_usb_connect$cdc_ncm(0x5, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x3ff, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "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"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000e00)={0x14, &(0x7f0000000d40)={0x20, 0x24, 0x4b, {0x4b, 0xa, "bc8fa6d9b1b98f8fae26ec166f817f22f15ab0f6ffeb64492c6356d38f63da2c86a6718fa2c4c1abcbf6d087957518585224bfca5441310bb129d8838431716c209b5f72725ea7a35c"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000010c0)={0x44, &(0x7f0000000e40)={0x0, 0x7, 0xa0, "20a23e6a6d55ee35c4674306ce5c20cbe785ed77280325f7893944a74894db34b076cb3641ae2c6ce45c7ca0fd792c23ef1e804981b3f5aaed96d05a9409c099340de0759d491cd0eecc305649f55d621299293de848e5a8e7e27b3999f63f014256be861abb47adcdf8f3a7f72f62df4c041ffbfcb0c1702a3e6e98d4688f494b0d36bf693b5549e6d2e99eee16822648ce429bd2e8e846247bebee8a8b8307"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000f80)={0x20, 0x80, 0x1c, {0x3ff, 0x0, 0x8, 0x3, 0x9, 0x2, 0x9, 0xffffffff, 0x7, 0x8, 0x5, 0x6}}, &(0x7f0000000fc0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000001000)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001040)={0x20, 0x87, 0x2, 0x200}, &(0x7f0000001080)={0x20, 0x89, 0x2, 0x1}}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x440c4) [ 2585.532711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2585.533630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2585.547134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2585.548323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:04:48 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) [ 2585.599804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2585.612877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2585.621823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2585.631274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:04:48 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, {0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, 0x3, [0xef, 0xc99d, 0x200, 0x1, 0x200, 0x200, 0x1f, 0x101]}, 0x5c) 23:04:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, 0x0, 0x0) 23:04:48 executing program 4: socketpair(0x8, 0x800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c, 0x80000) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x4, "c7021ecf"}, &(0x7f0000000200)=0x28) 23:04:48 executing program 5: r0 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x4, 0x0, 0x1f, 0xf7, 0x13, @rand_addr=' \x01\x00', @empty, 0x7800, 0x20, 0x1, 0xfffffffc}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x48042, 0x0) ioctl$PTP_SYS_OFFSET(r2, 0x43403d05, &(0x7f00000001c0)={0x14}) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000500)={0x9, 0x8}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000740)=0xe8) openat$cgroup_devices(r0, &(0x7f0000000780)='devices.deny\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x10) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000900)={@multicast1, @multicast2, r4}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_usb_connect$cdc_ncm(0x5, 0x87, &(0x7f0000000940)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x20, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3f4d0e3a"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8001, 0x3, 0x3}, {0x6, 0x24, 0x1a, 0x3ff, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x1, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9d, 0x1f, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x25, 0x1}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0x6, 0x5, 0x4, 0x20, 0xb3}, 0x50, &(0x7f0000000a40)={0x5, 0xf, 0x50, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x4, 0xfba8}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x1, 0xf00f, 0x4, [0x30, 0x7f7fcf, 0x3fc0, 0x60, 0x60c0, 0xff3fff]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "a3ed71c8e4051a9fa38150e630a65ed3"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x1, 0xff00}]}, 0x5, [{0x12, &(0x7f0000000ac0)=@string={0x12, 0x3, "837fc8a0df3f8cfc11bba6d9b52a4c18"}}, {0x100, &(0x7f0000000b00)=@string={0x100, 0x3, "4fcc63a21b54a4c9cb8b94f5e18814be6b33ccc63dc3a08dd06f74eca060efe47d4c718360fe4170a6b6221db4b4d3966f8d70a406f629eef99512c484f52253af748322b598ff0b7bb45a8b2b296d00418a843dccfa916b08cf94582db787d73313eed38013f66795d7964c128c24490ea4fb6d0fe85dc797c66ee237bbda8bd75f7487d48b636269a3bbd20a21fb2b6b40a23d56c0d9d23c339f89c52d416cf9788f6c53ffc41cb874ccd1b3b70c86653fc2433b51f7e0035c6b1b52d09bd6420b401c2ed7b34c6cf0d1468dbcc2749586d8cc5aaf8c95aa1caf082ee7213e7129da51e00623d1fddce069a5d5ab94ec5daae17ba6e4b84877cdd6e5e8"}}, {0x30, &(0x7f0000000c00)=@string={0x30, 0x3, "12f81c5dc02879748df74e0aa7c1a32f21ec3ec98711a6b329a0ca6c4527246046c9c595b30eab0e6ad5f763ac79"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x438}}]}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000e00)={0x14, &(0x7f0000000d40)={0x20, 0x24, 0x4b, {0x4b, 0xa, "bc8fa6d9b1b98f8fae26ec166f817f22f15ab0f6ffeb64492c6356d38f63da2c86a6718fa2c4c1abcbf6d087957518585224bfca5441310bb129d8838431716c209b5f72725ea7a35c"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000010c0)={0x44, &(0x7f0000000e40)={0x0, 0x7, 0xa0, "20a23e6a6d55ee35c4674306ce5c20cbe785ed77280325f7893944a74894db34b076cb3641ae2c6ce45c7ca0fd792c23ef1e804981b3f5aaed96d05a9409c099340de0759d491cd0eecc305649f55d621299293de848e5a8e7e27b3999f63f014256be861abb47adcdf8f3a7f72f62df4c041ffbfcb0c1702a3e6e98d4688f494b0d36bf693b5549e6d2e99eee16822648ce429bd2e8e846247bebee8a8b8307"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000f80)={0x20, 0x80, 0x1c, {0x3ff, 0x0, 0x8, 0x3, 0x9, 0x2, 0x9, 0xffffffff, 0x7, 0x8, 0x5, 0x6}}, &(0x7f0000000fc0)={0x20, 0x85, 0x4, 0x6}, &(0x7f0000001000)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001040)={0x20, 0x87, 0x2, 0x200}, &(0x7f0000001080)={0x20, 0x89, 0x2, 0x1}}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001180), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x38, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x440c4) 23:04:48 executing program 7: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x24000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x16}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc81}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b017ba963767f5d}, 0x10) r3 = memfd_secret(0x80000) bind$802154_raw(r3, &(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0xcdb3497cde600d27, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) [ 2585.819537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2585.823807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 23:04:48 executing program 2: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x24000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x16}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc81}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b017ba963767f5d}, 0x10) r3 = memfd_secret(0x80000) bind$802154_raw(r3, &(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0xcdb3497cde600d27, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) 23:04:48 executing program 7: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe0}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x24000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x16}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xc81}]}, 0x54}, 0x1, 0x0, 0x0, 0x8b017ba963767f5d}, 0x10) r3 = memfd_secret(0x80000) bind$802154_raw(r3, &(0x7f0000000500)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe02c}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8894) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0xcdb3497cde600d27, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) VM DIAGNOSIS: 23:04:40 Registers: info registers vcpu 0 RAX=0000000000000100 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888018e17e01 RSI=ffff888018e17ef0 RDI=ffff888018e17ef0 RBP=ffff888018e17948 RSP=ffff888018e17880 R8 =0000000000000001 R9 =ffff888018e17930 R10=000000000003c64c R11=0000000000008679 R12=ffff888018e17950 R13=ffff888018e17938 R14=ffff888018e17ef0 R15=ffff888018e178f0 RIP=ffffffff8135acc8 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e53a8000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa02308a710 CR3=000000001e7cc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8291c2f0 RDI=ffffffff8895a780 RBP=ffffffff8895a740 RSP=ffff8880175ef728 R8 =0000000000000000 R9 =ffffed1001360046 R10=00000000000fe503 R11=0000000000000001 R12=0000000000000823 R13=0000000000000060 R14=fffffbfff112b542 R15=dffffc0000000000 RIP=ffffffff8291c345 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7711ec0700 00000000 00000000 GS =0000 ffff8880e54a8000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556d1f124058 CR3=000000000e6b4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000