Warning: Permanently added '[localhost]:43603' (ECDSA) to the list of known hosts. 2022/10/03 19:00:12 fuzzer started 2022/10/03 19:00:13 dialing manager at localhost:35095 syzkaller login: [ 42.620164] cgroup: Unknown subsys name 'net' [ 42.736585] cgroup: Unknown subsys name 'rlimit' 2022/10/03 19:00:29 syscalls: 212 2022/10/03 19:00:29 code coverage: enabled 2022/10/03 19:00:29 comparison tracing: enabled 2022/10/03 19:00:29 extra coverage: enabled 2022/10/03 19:00:29 setuid sandbox: enabled 2022/10/03 19:00:29 namespace sandbox: enabled 2022/10/03 19:00:29 Android sandbox: enabled 2022/10/03 19:00:29 fault injection: enabled 2022/10/03 19:00:29 leak checking: enabled 2022/10/03 19:00:29 net packet injection: enabled 2022/10/03 19:00:29 net device setup: enabled 2022/10/03 19:00:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 19:00:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 19:00:29 USB emulation: enabled 2022/10/03 19:00:29 hci packet injection: enabled 2022/10/03 19:00:29 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 19:00:29 802.15.4 emulation: enabled 2022/10/03 19:00:29 fetching corpus: 0, signal 0/0 (executing program) 2022/10/03 19:00:30 starting 8 fuzzer processes 19:00:30 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x1, 0x94d, {{0x1c, 0x4, 0x3, 0x24, 0x70, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0x7fff, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x5f, 0x0, 0xc}, @rr={0x7, 0xb, 0x8c, [@empty, @private=0xa010102]}, @timestamp_addr={0x44, 0x14, 0xdb, 0x1, 0x7, [{@multicast2, 0xfff}, {@local, 0x6}]}, @timestamp={0x44, 0x24, 0xcc, 0x0, 0x8, [0xff, 0x3ff, 0xec1, 0x80000001, 0x1, 0x1f, 0xc39, 0x101]}, @end, @lsrr={0x83, 0xb, 0xd9, [@private=0xa010101, @loopback]}, @end, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r0, 0x4, 0x0, 0xfd, 0x8001, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x700, 0xfffffffe, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x700, 0x40, 0x7fffffff, 0xb9, {{0x4a, 0x4, 0x2, 0x4, 0x128, 0x65, 0x0, 0xfc, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x89, 0x2, [{0x5, 0x10, "9f29181b69af01b55c06b8f6b277"}, {0x0, 0xc, "a4ef1e80ef1608b70c64"}, {0x2, 0x11, "ec3c57df1ac6aa5c1925412a3a05cb"}, {0x1, 0xf, "fd471aad309012c0f9339859b0"}, {0x1, 0xe, "613a58ddf13874d8c39650e6"}, {0x7, 0x5, "a4c71d"}, {0x5, 0x10, "f7bd0403c7ca785911a862a70d9f"}, {0x2, 0x12, "0537146c916fb0eb46285324691a0431"}, {0x7, 0x12, "dfbb4ac3b415cd280ca08ccac92d57f3"}]}, @timestamp={0x44, 0x10, 0x40, 0x0, 0x8, [0x1, 0xff, 0x80000001]}, @ssrr={0x89, 0xf, 0x41, [@local, @multicast1, @multicast2]}, @lsrr={0x83, 0xf, 0xbd, [@private=0xa010102, @loopback, @multicast2]}, @timestamp_addr={0x44, 0x4c, 0x96, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x7e3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0x5}, {@multicast1, 0x7f}, {@multicast2, 0xffff}, {@local, 0x8000}, {@multicast2, 0x7}, {@remote, 0xf04}, {@multicast1, 0xc4}]}, @ssrr={0x89, 0xf, 0x7d, [@broadcast, @multicast2, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', r2, 0x2f, 0x0, 0x6, 0x3cd, 0x0, @local, @mcast1, 0x80, 0x8, 0xfffffff8, 0x5}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8091}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x0, 0x50a, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x93, 0x9e6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfc}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs2/binder-control\x00', 0x51b29de2a141c4ed, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000700)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000800)=""/54, 0x36}], 0x1, &(0x7f0000000880)=""/40, 0x28}, 0xbf3fbb63b6f404ed) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000900)={'tunl0\x00', r5, 0x40, 0x0, 0x3ff, 0x5, {{0x1f, 0x4, 0x2, 0x22, 0x7c, 0x65, 0x0, 0x5, 0x2f, 0x0, @broadcast, @loopback, {[@ssrr={0x89, 0x23, 0x86, [@loopback, @dev={0xac, 0x14, 0x14, 0x27}, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, @private=0xa010102, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x52, [@local, @empty, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp_addr={0x44, 0x2c, 0x16, 0x1, 0x6, [{@loopback}, {@loopback, 0x3}, {@remote, 0x4}, {@remote}, {@multicast1, 0x1ff}]}, @ra={0x94, 0x4}]}}}}}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/ehci_hcd', 0x240100, 0x22) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000013}, 0x811) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b80), 0x741a41, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000bc0)={{0x2, 0xfa}, {0x1, 0x6c}, 0xffffffc0, 0x1, 0xe7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000000c40)={0x400, 0x800, 0x73a75b41, 0x8, 0x1, 0xfb3}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/devices/msr', 0x400, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000001300)={'erspan0\x00', &(0x7f0000001240)={'tunl0\x00', r5, 0x10, 0x1, 0x7ab, 0x0, {{0x1c, 0x4, 0x1, 0x1a, 0x70, 0x65, 0x0, 0xb4, 0x4, 0x0, @multicast1, @empty, {[@generic={0x83, 0x8, "4bc2e8eb8a82"}, @ssrr={0x89, 0x23, 0xf1, [@local, @private=0xa010101, @rand_addr=0x64010100, @multicast2, @empty, @rand_addr=0x64010100, @remote, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0xdc, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x1d}]}, @ssrr={0x89, 0x13, 0x2a, [@remote, @multicast1, @local, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000013c0)={'gre0\x00', &(0x7f0000001340)={'gretap0\x00', r0, 0x8000, 0x80, 0x200, 0x7ff, {{0xb, 0x4, 0x3, 0x14, 0x2c, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast2, @remote, {[@end, @timestamp={0x44, 0x10, 0x64, 0x0, 0x7, [0x4, 0xfff, 0x0]}, @lsrr={0x83, 0x7, 0x49, [@rand_addr=0x64010101]}]}}}}}) 19:00:30 executing program 2: sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '{\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x48}}, 0x40010) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&&\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x21) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000800)={'gre0\x00', 0x0, 0x7, 0x8, 0x8, 0x9, {{0x28, 0x4, 0x3, 0x2, 0xa0, 0x65, 0x0, 0x0, 0x29, 0x0, @remote, @multicast1, {[@cipso={0x86, 0x4c, 0x1, [{0x0, 0xe, "7474863bc31e27cb043686a8"}, {0x1, 0x11, "c82e293368e96b46f0df5d4ab8ded8"}, {0x1, 0xa, "a1b77b12ff9c8be7"}, {0x7, 0xd, "87cdd929447c09a66a71af"}, {0x2, 0x10, "291d04c262ca81c4e8f29e65e943"}]}, @timestamp_prespec={0x44, 0x2c, 0x41, 0x3, 0x3, [{@multicast2, 0x9}, {@multicast2, 0x8}, {@loopback, 0x200}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xae82}, {@multicast2, 0x1f}]}, @lsrr={0x83, 0x13, 0x80, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010102]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x6c, r0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x6c}}, 0x40800) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000c00)=0x3, 0x4) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r4, 0x410, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000dc0)=0x2, 0x4) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000e40), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x15, 0x2, 0x0, 0x1]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x60314082}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d5}, 0x80) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001080), r1) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040), 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x81) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40804) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280), 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) 19:00:30 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r0, r1+60000000}, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x8, 0x400000, 0xffffffff, 0x5, 0x139f, 0x0, 0x3}, &(0x7f0000000100)={0x6, 0xffffffff, 0x9, 0x3f, 0x9, 0x2, 0x9, 0x4}, &(0x7f0000000140)={0x0, 0x1, 0x10001, 0x2, 0x6, 0x8, 0x50}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x400]}, 0x8}) ptrace(0x8, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x6}) wait4(0x0, &(0x7f0000000280), 0x10000001, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48840}, 0x40810) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8004) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000002600)={'ip6tnl0\x00', &(0x7f0000002580)={'sit0\x00', 0x0, 0x2f, 0xe1, 0x7f, 0x3, 0x4, @mcast2, @private0, 0x80, 0x20, 0x8, 0x7fff}}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000026c0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x3c, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002700), 0x82803, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000002740)) syz_genetlink_get_family_id$batadv(&(0x7f0000002780), r5) timer_create(0x6, &(0x7f00000027c0)={0x0, 0x2b}, &(0x7f0000002800)) accept(r5, &(0x7f0000002840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000028c0)=0x80) accept(r6, &(0x7f0000002900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000002980)=0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x54, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000050) getgid() 19:00:30 executing program 3: socketpair(0x27, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = socket(0x21, 0x6, 0x1f8) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/hidraw', 0x40002, 0x27) bind$802154_raw(r3, &(0x7f0000000200), 0x14) socketpair(0xb, 0x4, 0x2, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x4000000) accept(r2, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000400)=0x80) getpid() openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x98100, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ba}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20048080) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/sync_on_suspend', 0x1a1300, 0x80) ioctl$BINDER_CTL_ADD(r8, 0xc1086201, &(0x7f0000000700)={'binder0\x00'}) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000880), r5) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r9, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24004041) 19:00:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x1, 0x8, 0x0, 0x80000000, {{0xf, 0x4, 0x1, 0x13, 0x3c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x8, [{@broadcast, 0x602aa64f}, {@local, 0x3e3}]}, @end, @rr={0x7, 0xf, 0xc4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r1, 0x29, 0x80, 0x4, 0xff, 0x11, @loopback, @remote, 0x1, 0x7800, 0x8, 0x1}}) prctl$PR_GET_TIMERSLACK(0x1e) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/random', 0x602303, 0x8) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) prctl$PR_GET_CHILD_SUBREAPER(0x25) r4 = accept(r0, &(0x7f0000000340)=@l2, &(0x7f00000003c0)=0x80) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000400)={0xffff8000, [0x6, 0x800], 0x6}, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000001b80)={'ip6gre0\x00', &(0x7f0000001b00)={'ip6tnl0\x00', r1, 0x4, 0xff, 0x33, 0x668, 0x51, @remote, @loopback, 0x78b7, 0x40, 0x7f, 0xffffffff}}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000001c80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xecb559898a4f2fae}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x68, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x90) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d00), r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x1c, r7, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001e40), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x48, r8, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000c0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r7, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x1c}}, 0x8040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000002080)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000021c0)={'syztnl1\x00', &(0x7f00000020c0)={'syztnl0\x00', r9, 0x40, 0x7, 0x3623, 0x4, {{0x2e, 0x4, 0x3, 0x2, 0xb8, 0x67, 0x0, 0x5, 0x4, 0x0, @remote, @empty, {[@cipso={0x86, 0x23, 0x2, [{0x1, 0x5, "3b4d0e"}, {0x2, 0x10, "277eaf366496857b159683c6eef6"}, {0x1, 0x8, "88f634aa19fb"}]}, @end, @timestamp={0x44, 0xc, 0x80, 0x0, 0x6, [0x0, 0x1f6]}, @end, @cipso={0x86, 0x3d, 0x0, [{0x6, 0xb, "a25f5ca09e0f8d8163"}, {0x2, 0xb, "407a4af0bd1f5351ba"}, {0x2, 0x2}, {0x0, 0x8, "8a978367e5cd"}, {0x5, 0xe, "737f4f699e31e23d3115fe22"}, {0x6, 0x9, "337b2dd7dbdd06"}]}, @timestamp_prespec={0x44, 0x1c, 0x63, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x24}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc5}, {@private=0xa010101, 0x7ff}]}, @generic={0x94, 0x3, '_'}, @timestamp_addr={0x44, 0x14, 0xe5, 0x1, 0x0, [{@remote, 0x2}, {@local, 0x5}]}]}}}}}) [ 59.372757] audit: type=1400 audit(1664823630.647:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:00:30 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xfc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x80}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'tunl0\x00', r3, 0x7880, 0x8, 0x6, 0x4, {{0x23, 0x4, 0x3, 0xa, 0x8c, 0x64, 0x0, 0x1f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x72, 0x0, 0x7, [0x7, 0x4, 0x8, 0xfff, 0x8, 0x8000, 0x3, 0x81]}, @noop, @cipso={0x86, 0x4b, 0x1, [{0x6, 0x7, "97fec66cf0"}, {0x7, 0x3, ' '}, {0x7, 0xb, "2aaedf60654dadc728"}, {0x7, 0xb, "fdb51a934d247e5486"}, {0x1, 0x10, "e326ae74d77727a16f2620028e46"}, {0x6, 0x6, "27ddc017"}, {0x2, 0xf, "b1459ab2c508545f225554ce78"}]}]}}}}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xbcd}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc4) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000740)) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x48005}, 0x4004) unshare(0x400) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/module/nf_conntrack_sip', 0x2080, 0x100) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7e6a5a4b}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r7, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x10}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x800}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000085) 19:00:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}}, 0x4000001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x220, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000400}, 0x4000044) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0xa4000, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8801}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004080) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/dev/hwrng\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1f}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r4) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffff8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r7, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, r7, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000800}, 0x24000010) 19:00:30 executing program 6: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa01, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x28000, 0x1c4) write$tun(r0, &(0x7f0000000080)={@void, @val={0x1, 0x80, 0x3ff, 0x83, 0xb000, 0xffe0}, @x25={0x3, 0x35, 0x0, "7558e70f112c1fa121008585ace1523d749dcfd469311dce70fe657b3b90b5702c4963a4d0f15083dc4ee19af3e8fc1438c81c3701cb95ab6d47b4a971cbc7be506eeaef747819aa7cf8b7139bbcee65875614c38ba0842d9bac5e658367a17cb8413acb2d6071b301f63ec0e9b49b89feb60030c2b9310a94dffc339c696b7cb5298c9a762f998f4064b4d1970ef9be082d8e603c186ff458c17ed6819dd7ee2a451be688b753283f2cf991d0b8266a8a4a1d8fb78932bf7ccf00bcd155181d384057d2b659b919cb973cf2a4351a6f4752a46dc9f13be568780f8ee9dbd7cdfd69c083f0"}}, 0xf2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x180000, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x2, 0x4, "81ad53", 0x7f, 0xd}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000340)={'\x00', 0x7, 0x1, 0x4}) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x10001, 0x1000]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) tgkill(0xffffffffffffffff, 0x0, 0x37) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getpid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000540)={0x3, 0x1, 0x0, 'queue0\x00', 0x3f}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r5, 0x87db92063309c3a1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c0) socketpair(0x1, 0x2, 0x4, &(0x7f0000000740)) clock_gettime(0x2, &(0x7f0000000780)) r6 = openat$cgroup_pressure(r3, &(0x7f0000000840)='memory.pressure\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x2000, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}, {@cache_none}, {@cache_mmap}, {@loose}, {@nodevmap}, {@cachetag={'cachetag', 0x3d, ']:+.//'}}], [{@uid_lt={'uid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@dont_hash}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@seclabel}, {@obj_user={'obj_user', 0x3d, 'queue0\x00'}}, {@dont_appraise}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}]}}) [ 60.670043] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.672020] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.675937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.677476] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.687757] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.691178] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.694252] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.714690] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.716240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.718966] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.719160] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.723500] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.725202] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.728624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.731061] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.732928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.735633] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.741278] Bluetooth: hci3: HCI_REQ-0x0c1a [ 60.751468] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.753194] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.754901] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.759018] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.760636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.765748] Bluetooth: hci2: HCI_REQ-0x0c1a [ 60.774766] Bluetooth: hci1: HCI_REQ-0x0c1a [ 60.790109] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.792088] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 60.794071] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 60.795711] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 60.799043] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 60.801029] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 60.802828] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 60.807540] Bluetooth: hci7: HCI_REQ-0x0c1a [ 60.820659] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.827514] Bluetooth: hci0: HCI_REQ-0x0c1a [ 60.839594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.845632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.847986] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.857914] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.860376] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.861901] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.866277] Bluetooth: hci4: HCI_REQ-0x0c1a [ 60.925866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 60.933588] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 60.937020] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 60.952734] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 60.955484] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 60.956890] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 60.962132] Bluetooth: hci5: HCI_REQ-0x0c1a [ 62.813924] Bluetooth: hci1: command 0x0409 tx timeout [ 62.813979] Bluetooth: hci3: command 0x0409 tx timeout [ 62.815296] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 62.878492] Bluetooth: hci0: command 0x0409 tx timeout [ 62.878572] Bluetooth: hci2: command 0x0409 tx timeout [ 62.879119] Bluetooth: hci7: command 0x0409 tx timeout [ 62.941388] Bluetooth: hci4: command 0x0409 tx timeout [ 63.005586] Bluetooth: hci5: command 0x0409 tx timeout [ 64.861395] Bluetooth: hci3: command 0x041b tx timeout [ 64.862076] Bluetooth: hci1: command 0x041b tx timeout [ 64.925516] Bluetooth: hci2: command 0x041b tx timeout [ 64.926393] Bluetooth: hci7: command 0x041b tx timeout [ 64.927200] Bluetooth: hci0: command 0x041b tx timeout [ 64.989412] Bluetooth: hci4: command 0x041b tx timeout [ 65.053428] Bluetooth: hci5: command 0x041b tx timeout [ 66.909438] Bluetooth: hci1: command 0x040f tx timeout [ 66.910427] Bluetooth: hci3: command 0x040f tx timeout [ 66.973755] Bluetooth: hci0: command 0x040f tx timeout [ 66.973783] Bluetooth: hci7: command 0x040f tx timeout [ 66.974290] Bluetooth: hci2: command 0x040f tx timeout [ 67.038129] Bluetooth: hci4: command 0x040f tx timeout [ 67.101362] Bluetooth: hci5: command 0x040f tx timeout [ 67.421491] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 68.957477] Bluetooth: hci3: command 0x0419 tx timeout [ 68.958263] Bluetooth: hci1: command 0x0419 tx timeout [ 69.021412] Bluetooth: hci7: command 0x0419 tx timeout [ 69.021984] Bluetooth: hci2: command 0x0419 tx timeout [ 69.022760] Bluetooth: hci0: command 0x0419 tx timeout [ 69.086432] Bluetooth: hci4: command 0x0419 tx timeout [ 69.149456] Bluetooth: hci5: command 0x0419 tx timeout [ 69.862660] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 69.889689] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 69.897704] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 69.910540] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 69.919149] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 69.924589] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 69.929986] Bluetooth: hci6: HCI_REQ-0x0c1a [ 71.965535] Bluetooth: hci6: command 0x0409 tx timeout [ 74.014472] Bluetooth: hci6: command 0x041b tx timeout [ 76.061388] Bluetooth: hci6: command 0x040f tx timeout [ 78.110402] Bluetooth: hci6: command 0x0419 tx timeout 19:01:28 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r0, r1+60000000}, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x8, 0x400000, 0xffffffff, 0x5, 0x139f, 0x0, 0x3}, &(0x7f0000000100)={0x6, 0xffffffff, 0x9, 0x3f, 0x9, 0x2, 0x9, 0x4}, &(0x7f0000000140)={0x0, 0x1, 0x10001, 0x2, 0x6, 0x8, 0x50}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x400]}, 0x8}) ptrace(0x8, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x6}) wait4(0x0, &(0x7f0000000280), 0x10000001, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48840}, 0x40810) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8004) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000002600)={'ip6tnl0\x00', &(0x7f0000002580)={'sit0\x00', 0x0, 0x2f, 0xe1, 0x7f, 0x3, 0x4, @mcast2, @private0, 0x80, 0x20, 0x8, 0x7fff}}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000026c0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x3c, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002700), 0x82803, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000002740)) syz_genetlink_get_family_id$batadv(&(0x7f0000002780), r5) timer_create(0x6, &(0x7f00000027c0)={0x0, 0x2b}, &(0x7f0000002800)) accept(r5, &(0x7f0000002840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000028c0)=0x80) accept(r6, &(0x7f0000002900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000002980)=0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x54, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000050) getgid() [ 122.147145] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 122.148494] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 122.149298] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 122.151241] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 122.152759] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 122.154188] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 122.158749] Bluetooth: hci7: HCI_REQ-0x0c1a [ 123.998359] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 124.126377] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 124.189417] Bluetooth: hci7: command 0x0409 tx timeout [ 126.237404] Bluetooth: hci7: command 0x041b tx timeout [ 126.310976] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 126.313198] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 126.315692] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 126.318705] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 126.321068] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 126.323900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 126.328763] Bluetooth: hci5: HCI_REQ-0x0c1a [ 128.221467] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 128.285393] Bluetooth: hci7: command 0x040f tx timeout [ 128.349399] Bluetooth: hci5: command 0x0409 tx timeout [ 130.333414] Bluetooth: hci7: command 0x0419 tx timeout [ 130.398366] Bluetooth: hci5: command 0x041b tx timeout [ 130.403294] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.404384] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.405112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.407004] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.408231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 130.409012] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.411608] Bluetooth: hci2: HCI_REQ-0x0c1a [ 132.445512] Bluetooth: hci5: command 0x040f tx timeout [ 132.445522] Bluetooth: hci2: command 0x0409 tx timeout [ 134.494156] Bluetooth: hci2: command 0x041b tx timeout [ 134.495092] Bluetooth: hci5: command 0x0419 tx timeout [ 136.541365] Bluetooth: hci2: command 0x040f tx timeout [ 138.589811] Bluetooth: hci2: command 0x0419 tx timeout 19:02:14 executing program 2: sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '{\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x48}}, 0x40010) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&&\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x21) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000800)={'gre0\x00', 0x0, 0x7, 0x8, 0x8, 0x9, {{0x28, 0x4, 0x3, 0x2, 0xa0, 0x65, 0x0, 0x0, 0x29, 0x0, @remote, @multicast1, {[@cipso={0x86, 0x4c, 0x1, [{0x0, 0xe, "7474863bc31e27cb043686a8"}, {0x1, 0x11, "c82e293368e96b46f0df5d4ab8ded8"}, {0x1, 0xa, "a1b77b12ff9c8be7"}, {0x7, 0xd, "87cdd929447c09a66a71af"}, {0x2, 0x10, "291d04c262ca81c4e8f29e65e943"}]}, @timestamp_prespec={0x44, 0x2c, 0x41, 0x3, 0x3, [{@multicast2, 0x9}, {@multicast2, 0x8}, {@loopback, 0x200}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xae82}, {@multicast2, 0x1f}]}, @lsrr={0x83, 0x13, 0x80, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010102]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x6c, r0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x6c}}, 0x40800) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000c00)=0x3, 0x4) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r4, 0x410, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000dc0)=0x2, 0x4) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000e40), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x15, 0x2, 0x0, 0x1]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x60314082}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d5}, 0x80) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001080), r1) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040), 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x81) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40804) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280), 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) 19:02:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x1, 0x8, 0x0, 0x80000000, {{0xf, 0x4, 0x1, 0x13, 0x3c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x8, [{@broadcast, 0x602aa64f}, {@local, 0x3e3}]}, @end, @rr={0x7, 0xf, 0xc4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r1, 0x29, 0x80, 0x4, 0xff, 0x11, @loopback, @remote, 0x1, 0x7800, 0x8, 0x1}}) prctl$PR_GET_TIMERSLACK(0x1e) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/random', 0x602303, 0x8) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) prctl$PR_GET_CHILD_SUBREAPER(0x25) r4 = accept(r0, &(0x7f0000000340)=@l2, &(0x7f00000003c0)=0x80) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000400)={0xffff8000, [0x6, 0x800], 0x6}, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000001b80)={'ip6gre0\x00', &(0x7f0000001b00)={'ip6tnl0\x00', r1, 0x4, 0xff, 0x33, 0x668, 0x51, @remote, @loopback, 0x78b7, 0x40, 0x7f, 0xffffffff}}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000001c80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xecb559898a4f2fae}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x68, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x90) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d00), r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x1c, r7, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001e40), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x48, r8, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000c0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r7, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x1c}}, 0x8040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000002080)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000021c0)={'syztnl1\x00', &(0x7f00000020c0)={'syztnl0\x00', r9, 0x40, 0x7, 0x3623, 0x4, {{0x2e, 0x4, 0x3, 0x2, 0xb8, 0x67, 0x0, 0x5, 0x4, 0x0, @remote, @empty, {[@cipso={0x86, 0x23, 0x2, [{0x1, 0x5, "3b4d0e"}, {0x2, 0x10, "277eaf366496857b159683c6eef6"}, {0x1, 0x8, "88f634aa19fb"}]}, @end, @timestamp={0x44, 0xc, 0x80, 0x0, 0x6, [0x0, 0x1f6]}, @end, @cipso={0x86, 0x3d, 0x0, [{0x6, 0xb, "a25f5ca09e0f8d8163"}, {0x2, 0xb, "407a4af0bd1f5351ba"}, {0x2, 0x2}, {0x0, 0x8, "8a978367e5cd"}, {0x5, 0xe, "737f4f699e31e23d3115fe22"}, {0x6, 0x9, "337b2dd7dbdd06"}]}, @timestamp_prespec={0x44, 0x1c, 0x63, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x24}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc5}, {@private=0xa010101, 0x7ff}]}, @generic={0x94, 0x3, '_'}, @timestamp_addr={0x44, 0x14, 0xe5, 0x1, 0x0, [{@remote, 0x2}, {@local, 0x5}]}]}}}}}) 19:02:14 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xfc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x80}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'tunl0\x00', r3, 0x7880, 0x8, 0x6, 0x4, {{0x23, 0x4, 0x3, 0xa, 0x8c, 0x64, 0x0, 0x1f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x72, 0x0, 0x7, [0x7, 0x4, 0x8, 0xfff, 0x8, 0x8000, 0x3, 0x81]}, @noop, @cipso={0x86, 0x4b, 0x1, [{0x6, 0x7, "97fec66cf0"}, {0x7, 0x3, ' '}, {0x7, 0xb, "2aaedf60654dadc728"}, {0x7, 0xb, "fdb51a934d247e5486"}, {0x1, 0x10, "e326ae74d77727a16f2620028e46"}, {0x6, 0x6, "27ddc017"}, {0x2, 0xf, "b1459ab2c508545f225554ce78"}]}]}}}}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xbcd}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc4) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000740)) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x48005}, 0x4004) unshare(0x400) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/module/nf_conntrack_sip', 0x2080, 0x100) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7e6a5a4b}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r7, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x10}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x800}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000085) 19:02:14 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r0, r1+60000000}, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x8, 0x400000, 0xffffffff, 0x5, 0x139f, 0x0, 0x3}, &(0x7f0000000100)={0x6, 0xffffffff, 0x9, 0x3f, 0x9, 0x2, 0x9, 0x4}, &(0x7f0000000140)={0x0, 0x1, 0x10001, 0x2, 0x6, 0x8, 0x50}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x400]}, 0x8}) ptrace(0x8, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x6}) wait4(0x0, &(0x7f0000000280), 0x10000001, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48840}, 0x40810) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8004) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000002600)={'ip6tnl0\x00', &(0x7f0000002580)={'sit0\x00', 0x0, 0x2f, 0xe1, 0x7f, 0x3, 0x4, @mcast2, @private0, 0x80, 0x20, 0x8, 0x7fff}}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000026c0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x3c, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002700), 0x82803, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000002740)) syz_genetlink_get_family_id$batadv(&(0x7f0000002780), r5) timer_create(0x6, &(0x7f00000027c0)={0x0, 0x2b}, &(0x7f0000002800)) accept(r5, &(0x7f0000002840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000028c0)=0x80) accept(r6, &(0x7f0000002900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000002980)=0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x54, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000050) getgid() 19:02:14 executing program 3: socketpair(0x27, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = socket(0x21, 0x6, 0x1f8) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/hidraw', 0x40002, 0x27) bind$802154_raw(r3, &(0x7f0000000200), 0x14) socketpair(0xb, 0x4, 0x2, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x4000000) accept(r2, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000400)=0x80) getpid() openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x98100, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ba}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20048080) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/sync_on_suspend', 0x1a1300, 0x80) ioctl$BINDER_CTL_ADD(r8, 0xc1086201, &(0x7f0000000700)={'binder0\x00'}) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000880), r5) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r9, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24004041) 19:02:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}}, 0x4000001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x220, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000400}, 0x4000044) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0xa4000, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8801}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004080) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/dev/hwrng\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1f}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r4) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffff8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r7, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, r7, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000800}, 0x24000010) 19:02:14 executing program 6: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa01, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x28000, 0x1c4) write$tun(r0, &(0x7f0000000080)={@void, @val={0x1, 0x80, 0x3ff, 0x83, 0xb000, 0xffe0}, @x25={0x3, 0x35, 0x0, "7558e70f112c1fa121008585ace1523d749dcfd469311dce70fe657b3b90b5702c4963a4d0f15083dc4ee19af3e8fc1438c81c3701cb95ab6d47b4a971cbc7be506eeaef747819aa7cf8b7139bbcee65875614c38ba0842d9bac5e658367a17cb8413acb2d6071b301f63ec0e9b49b89feb60030c2b9310a94dffc339c696b7cb5298c9a762f998f4064b4d1970ef9be082d8e603c186ff458c17ed6819dd7ee2a451be688b753283f2cf991d0b8266a8a4a1d8fb78932bf7ccf00bcd155181d384057d2b659b919cb973cf2a4351a6f4752a46dc9f13be568780f8ee9dbd7cdfd69c083f0"}}, 0xf2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x180000, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x2, 0x4, "81ad53", 0x7f, 0xd}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000340)={'\x00', 0x7, 0x1, 0x4}) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x10001, 0x1000]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) tgkill(0xffffffffffffffff, 0x0, 0x37) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getpid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000540)={0x3, 0x1, 0x0, 'queue0\x00', 0x3f}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r5, 0x87db92063309c3a1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c0) socketpair(0x1, 0x2, 0x4, &(0x7f0000000740)) clock_gettime(0x2, &(0x7f0000000780)) r6 = openat$cgroup_pressure(r3, &(0x7f0000000840)='memory.pressure\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x2000, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}, {@cache_none}, {@cache_mmap}, {@loose}, {@nodevmap}, {@cachetag={'cachetag', 0x3d, ']:+.//'}}], [{@uid_lt={'uid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@dont_hash}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@seclabel}, {@obj_user={'obj_user', 0x3d, 'queue0\x00'}}, {@dont_appraise}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}]}}) 19:02:14 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x1, 0x94d, {{0x1c, 0x4, 0x3, 0x24, 0x70, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0x7fff, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x5f, 0x0, 0xc}, @rr={0x7, 0xb, 0x8c, [@empty, @private=0xa010102]}, @timestamp_addr={0x44, 0x14, 0xdb, 0x1, 0x7, [{@multicast2, 0xfff}, {@local, 0x6}]}, @timestamp={0x44, 0x24, 0xcc, 0x0, 0x8, [0xff, 0x3ff, 0xec1, 0x80000001, 0x1, 0x1f, 0xc39, 0x101]}, @end, @lsrr={0x83, 0xb, 0xd9, [@private=0xa010101, @loopback]}, @end, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r0, 0x4, 0x0, 0xfd, 0x8001, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x700, 0xfffffffe, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x700, 0x40, 0x7fffffff, 0xb9, {{0x4a, 0x4, 0x2, 0x4, 0x128, 0x65, 0x0, 0xfc, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x89, 0x2, [{0x5, 0x10, "9f29181b69af01b55c06b8f6b277"}, {0x0, 0xc, "a4ef1e80ef1608b70c64"}, {0x2, 0x11, "ec3c57df1ac6aa5c1925412a3a05cb"}, {0x1, 0xf, "fd471aad309012c0f9339859b0"}, {0x1, 0xe, "613a58ddf13874d8c39650e6"}, {0x7, 0x5, "a4c71d"}, {0x5, 0x10, "f7bd0403c7ca785911a862a70d9f"}, {0x2, 0x12, "0537146c916fb0eb46285324691a0431"}, {0x7, 0x12, "dfbb4ac3b415cd280ca08ccac92d57f3"}]}, @timestamp={0x44, 0x10, 0x40, 0x0, 0x8, [0x1, 0xff, 0x80000001]}, @ssrr={0x89, 0xf, 0x41, [@local, @multicast1, @multicast2]}, @lsrr={0x83, 0xf, 0xbd, [@private=0xa010102, @loopback, @multicast2]}, @timestamp_addr={0x44, 0x4c, 0x96, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x7e3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0x5}, {@multicast1, 0x7f}, {@multicast2, 0xffff}, {@local, 0x8000}, {@multicast2, 0x7}, {@remote, 0xf04}, {@multicast1, 0xc4}]}, @ssrr={0x89, 0xf, 0x7d, [@broadcast, @multicast2, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', r2, 0x2f, 0x0, 0x6, 0x3cd, 0x0, @local, @mcast1, 0x80, 0x8, 0xfffffff8, 0x5}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8091}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x0, 0x50a, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x93, 0x9e6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfc}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs2/binder-control\x00', 0x51b29de2a141c4ed, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000700)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000800)=""/54, 0x36}], 0x1, &(0x7f0000000880)=""/40, 0x28}, 0xbf3fbb63b6f404ed) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000900)={'tunl0\x00', r5, 0x40, 0x0, 0x3ff, 0x5, {{0x1f, 0x4, 0x2, 0x22, 0x7c, 0x65, 0x0, 0x5, 0x2f, 0x0, @broadcast, @loopback, {[@ssrr={0x89, 0x23, 0x86, [@loopback, @dev={0xac, 0x14, 0x14, 0x27}, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, @private=0xa010102, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x52, [@local, @empty, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp_addr={0x44, 0x2c, 0x16, 0x1, 0x6, [{@loopback}, {@loopback, 0x3}, {@remote, 0x4}, {@remote}, {@multicast1, 0x1ff}]}, @ra={0x94, 0x4}]}}}}}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/ehci_hcd', 0x240100, 0x22) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000013}, 0x811) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b80), 0x741a41, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000bc0)={{0x2, 0xfa}, {0x1, 0x6c}, 0xffffffc0, 0x1, 0xe7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000000c40)={0x400, 0x800, 0x73a75b41, 0x8, 0x1, 0xfb3}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/devices/msr', 0x400, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000001300)={'erspan0\x00', &(0x7f0000001240)={'tunl0\x00', r5, 0x10, 0x1, 0x7ab, 0x0, {{0x1c, 0x4, 0x1, 0x1a, 0x70, 0x65, 0x0, 0xb4, 0x4, 0x0, @multicast1, @empty, {[@generic={0x83, 0x8, "4bc2e8eb8a82"}, @ssrr={0x89, 0x23, 0xf1, [@local, @private=0xa010101, @rand_addr=0x64010100, @multicast2, @empty, @rand_addr=0x64010100, @remote, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0xdc, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x1d}]}, @ssrr={0x89, 0x13, 0x2a, [@remote, @multicast1, @local, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000013c0)={'gre0\x00', &(0x7f0000001340)={'gretap0\x00', r0, 0x8000, 0x80, 0x200, 0x7ff, {{0xb, 0x4, 0x3, 0x14, 0x2c, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast2, @remote, {[@end, @timestamp={0x44, 0x10, 0x64, 0x0, 0x7, [0x4, 0xfff, 0x0]}, @lsrr={0x83, 0x7, 0x49, [@rand_addr=0x64010101]}]}}}}}) 19:02:25 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r0, r1+60000000}, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x8, 0x400000, 0xffffffff, 0x5, 0x139f, 0x0, 0x3}, &(0x7f0000000100)={0x6, 0xffffffff, 0x9, 0x3f, 0x9, 0x2, 0x9, 0x4}, &(0x7f0000000140)={0x0, 0x1, 0x10001, 0x2, 0x6, 0x8, 0x50}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x400]}, 0x8}) ptrace(0x8, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x6}) wait4(0x0, &(0x7f0000000280), 0x10000001, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48840}, 0x40810) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8004) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000002600)={'ip6tnl0\x00', &(0x7f0000002580)={'sit0\x00', 0x0, 0x2f, 0xe1, 0x7f, 0x3, 0x4, @mcast2, @private0, 0x80, 0x20, 0x8, 0x7fff}}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000026c0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x3c, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002700), 0x82803, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000002740)) syz_genetlink_get_family_id$batadv(&(0x7f0000002780), r5) timer_create(0x6, &(0x7f00000027c0)={0x0, 0x2b}, &(0x7f0000002800)) accept(r5, &(0x7f0000002840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000028c0)=0x80) accept(r6, &(0x7f0000002900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000002980)=0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x54, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000050) getgid() 19:02:25 executing program 6: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa01, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x28000, 0x1c4) write$tun(r0, &(0x7f0000000080)={@void, @val={0x1, 0x80, 0x3ff, 0x83, 0xb000, 0xffe0}, @x25={0x3, 0x35, 0x0, "7558e70f112c1fa121008585ace1523d749dcfd469311dce70fe657b3b90b5702c4963a4d0f15083dc4ee19af3e8fc1438c81c3701cb95ab6d47b4a971cbc7be506eeaef747819aa7cf8b7139bbcee65875614c38ba0842d9bac5e658367a17cb8413acb2d6071b301f63ec0e9b49b89feb60030c2b9310a94dffc339c696b7cb5298c9a762f998f4064b4d1970ef9be082d8e603c186ff458c17ed6819dd7ee2a451be688b753283f2cf991d0b8266a8a4a1d8fb78932bf7ccf00bcd155181d384057d2b659b919cb973cf2a4351a6f4752a46dc9f13be568780f8ee9dbd7cdfd69c083f0"}}, 0xf2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x180000, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x2, 0x4, "81ad53", 0x7f, 0xd}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000340)={'\x00', 0x7, 0x1, 0x4}) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x10001, 0x1000]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) tgkill(0xffffffffffffffff, 0x0, 0x37) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getpid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000540)={0x3, 0x1, 0x0, 'queue0\x00', 0x3f}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r5, 0x87db92063309c3a1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c0) socketpair(0x1, 0x2, 0x4, &(0x7f0000000740)) clock_gettime(0x2, &(0x7f0000000780)) r6 = openat$cgroup_pressure(r3, &(0x7f0000000840)='memory.pressure\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x2000, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}, {@cache_none}, {@cache_mmap}, {@loose}, {@nodevmap}, {@cachetag={'cachetag', 0x3d, ']:+.//'}}], [{@uid_lt={'uid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@dont_hash}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@seclabel}, {@obj_user={'obj_user', 0x3d, 'queue0\x00'}}, {@dont_appraise}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}]}}) 19:02:25 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xfc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x80}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'tunl0\x00', r3, 0x7880, 0x8, 0x6, 0x4, {{0x23, 0x4, 0x3, 0xa, 0x8c, 0x64, 0x0, 0x1f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x72, 0x0, 0x7, [0x7, 0x4, 0x8, 0xfff, 0x8, 0x8000, 0x3, 0x81]}, @noop, @cipso={0x86, 0x4b, 0x1, [{0x6, 0x7, "97fec66cf0"}, {0x7, 0x3, ' '}, {0x7, 0xb, "2aaedf60654dadc728"}, {0x7, 0xb, "fdb51a934d247e5486"}, {0x1, 0x10, "e326ae74d77727a16f2620028e46"}, {0x6, 0x6, "27ddc017"}, {0x2, 0xf, "b1459ab2c508545f225554ce78"}]}]}}}}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xbcd}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc4) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000740)) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x48005}, 0x4004) unshare(0x400) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/module/nf_conntrack_sip', 0x2080, 0x100) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7e6a5a4b}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r7, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x10}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x800}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000085) 19:02:25 executing program 3: socketpair(0x27, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = socket(0x21, 0x6, 0x1f8) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/hidraw', 0x40002, 0x27) bind$802154_raw(r3, &(0x7f0000000200), 0x14) socketpair(0xb, 0x4, 0x2, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x4000000) accept(r2, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000400)=0x80) getpid() openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x98100, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ba}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20048080) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/sync_on_suspend', 0x1a1300, 0x80) ioctl$BINDER_CTL_ADD(r8, 0xc1086201, &(0x7f0000000700)={'binder0\x00'}) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000880), r5) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r9, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24004041) 19:02:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}}, 0x4000001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x220, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000400}, 0x4000044) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0xa4000, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8801}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004080) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/dev/hwrng\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1f}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r4) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffff8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r7, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, r7, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000800}, 0x24000010) 19:02:25 executing program 2: sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '{\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x48}}, 0x40010) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&&\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x21) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000800)={'gre0\x00', 0x0, 0x7, 0x8, 0x8, 0x9, {{0x28, 0x4, 0x3, 0x2, 0xa0, 0x65, 0x0, 0x0, 0x29, 0x0, @remote, @multicast1, {[@cipso={0x86, 0x4c, 0x1, [{0x0, 0xe, "7474863bc31e27cb043686a8"}, {0x1, 0x11, "c82e293368e96b46f0df5d4ab8ded8"}, {0x1, 0xa, "a1b77b12ff9c8be7"}, {0x7, 0xd, "87cdd929447c09a66a71af"}, {0x2, 0x10, "291d04c262ca81c4e8f29e65e943"}]}, @timestamp_prespec={0x44, 0x2c, 0x41, 0x3, 0x3, [{@multicast2, 0x9}, {@multicast2, 0x8}, {@loopback, 0x200}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xae82}, {@multicast2, 0x1f}]}, @lsrr={0x83, 0x13, 0x80, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010102]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x6c, r0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x6c}}, 0x40800) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000c00)=0x3, 0x4) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r4, 0x410, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000dc0)=0x2, 0x4) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000e40), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x15, 0x2, 0x0, 0x1]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x60314082}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d5}, 0x80) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001080), r1) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040), 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x81) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40804) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280), 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) 19:02:25 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x1, 0x8, 0x0, 0x80000000, {{0xf, 0x4, 0x1, 0x13, 0x3c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x8, [{@broadcast, 0x602aa64f}, {@local, 0x3e3}]}, @end, @rr={0x7, 0xf, 0xc4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r1, 0x29, 0x80, 0x4, 0xff, 0x11, @loopback, @remote, 0x1, 0x7800, 0x8, 0x1}}) prctl$PR_GET_TIMERSLACK(0x1e) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/random', 0x602303, 0x8) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) prctl$PR_GET_CHILD_SUBREAPER(0x25) r4 = accept(r0, &(0x7f0000000340)=@l2, &(0x7f00000003c0)=0x80) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000400)={0xffff8000, [0x6, 0x800], 0x6}, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000001b80)={'ip6gre0\x00', &(0x7f0000001b00)={'ip6tnl0\x00', r1, 0x4, 0xff, 0x33, 0x668, 0x51, @remote, @loopback, 0x78b7, 0x40, 0x7f, 0xffffffff}}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000001c80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xecb559898a4f2fae}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x68, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x90) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d00), r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x1c, r7, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001e40), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x48, r8, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000c0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r7, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x1c}}, 0x8040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000002080)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000021c0)={'syztnl1\x00', &(0x7f00000020c0)={'syztnl0\x00', r9, 0x40, 0x7, 0x3623, 0x4, {{0x2e, 0x4, 0x3, 0x2, 0xb8, 0x67, 0x0, 0x5, 0x4, 0x0, @remote, @empty, {[@cipso={0x86, 0x23, 0x2, [{0x1, 0x5, "3b4d0e"}, {0x2, 0x10, "277eaf366496857b159683c6eef6"}, {0x1, 0x8, "88f634aa19fb"}]}, @end, @timestamp={0x44, 0xc, 0x80, 0x0, 0x6, [0x0, 0x1f6]}, @end, @cipso={0x86, 0x3d, 0x0, [{0x6, 0xb, "a25f5ca09e0f8d8163"}, {0x2, 0xb, "407a4af0bd1f5351ba"}, {0x2, 0x2}, {0x0, 0x8, "8a978367e5cd"}, {0x5, 0xe, "737f4f699e31e23d3115fe22"}, {0x6, 0x9, "337b2dd7dbdd06"}]}, @timestamp_prespec={0x44, 0x1c, 0x63, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x24}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc5}, {@private=0xa010101, 0x7ff}]}, @generic={0x94, 0x3, '_'}, @timestamp_addr={0x44, 0x14, 0xe5, 0x1, 0x0, [{@remote, 0x2}, {@local, 0x5}]}]}}}}}) 19:02:25 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x1, 0x94d, {{0x1c, 0x4, 0x3, 0x24, 0x70, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0x7fff, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x5f, 0x0, 0xc}, @rr={0x7, 0xb, 0x8c, [@empty, @private=0xa010102]}, @timestamp_addr={0x44, 0x14, 0xdb, 0x1, 0x7, [{@multicast2, 0xfff}, {@local, 0x6}]}, @timestamp={0x44, 0x24, 0xcc, 0x0, 0x8, [0xff, 0x3ff, 0xec1, 0x80000001, 0x1, 0x1f, 0xc39, 0x101]}, @end, @lsrr={0x83, 0xb, 0xd9, [@private=0xa010101, @loopback]}, @end, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r0, 0x4, 0x0, 0xfd, 0x8001, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x700, 0xfffffffe, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x700, 0x40, 0x7fffffff, 0xb9, {{0x4a, 0x4, 0x2, 0x4, 0x128, 0x65, 0x0, 0xfc, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x89, 0x2, [{0x5, 0x10, "9f29181b69af01b55c06b8f6b277"}, {0x0, 0xc, "a4ef1e80ef1608b70c64"}, {0x2, 0x11, "ec3c57df1ac6aa5c1925412a3a05cb"}, {0x1, 0xf, "fd471aad309012c0f9339859b0"}, {0x1, 0xe, "613a58ddf13874d8c39650e6"}, {0x7, 0x5, "a4c71d"}, {0x5, 0x10, "f7bd0403c7ca785911a862a70d9f"}, {0x2, 0x12, "0537146c916fb0eb46285324691a0431"}, {0x7, 0x12, "dfbb4ac3b415cd280ca08ccac92d57f3"}]}, @timestamp={0x44, 0x10, 0x40, 0x0, 0x8, [0x1, 0xff, 0x80000001]}, @ssrr={0x89, 0xf, 0x41, [@local, @multicast1, @multicast2]}, @lsrr={0x83, 0xf, 0xbd, [@private=0xa010102, @loopback, @multicast2]}, @timestamp_addr={0x44, 0x4c, 0x96, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x7e3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0x5}, {@multicast1, 0x7f}, {@multicast2, 0xffff}, {@local, 0x8000}, {@multicast2, 0x7}, {@remote, 0xf04}, {@multicast1, 0xc4}]}, @ssrr={0x89, 0xf, 0x7d, [@broadcast, @multicast2, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', r2, 0x2f, 0x0, 0x6, 0x3cd, 0x0, @local, @mcast1, 0x80, 0x8, 0xfffffff8, 0x5}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8091}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x0, 0x50a, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x93, 0x9e6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfc}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs2/binder-control\x00', 0x51b29de2a141c4ed, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000700)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000800)=""/54, 0x36}], 0x1, &(0x7f0000000880)=""/40, 0x28}, 0xbf3fbb63b6f404ed) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000900)={'tunl0\x00', r5, 0x40, 0x0, 0x3ff, 0x5, {{0x1f, 0x4, 0x2, 0x22, 0x7c, 0x65, 0x0, 0x5, 0x2f, 0x0, @broadcast, @loopback, {[@ssrr={0x89, 0x23, 0x86, [@loopback, @dev={0xac, 0x14, 0x14, 0x27}, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, @private=0xa010102, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x52, [@local, @empty, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp_addr={0x44, 0x2c, 0x16, 0x1, 0x6, [{@loopback}, {@loopback, 0x3}, {@remote, 0x4}, {@remote}, {@multicast1, 0x1ff}]}, @ra={0x94, 0x4}]}}}}}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/ehci_hcd', 0x240100, 0x22) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000013}, 0x811) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b80), 0x741a41, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000bc0)={{0x2, 0xfa}, {0x1, 0x6c}, 0xffffffc0, 0x1, 0xe7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000000c40)={0x400, 0x800, 0x73a75b41, 0x8, 0x1, 0xfb3}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/devices/msr', 0x400, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000001300)={'erspan0\x00', &(0x7f0000001240)={'tunl0\x00', r5, 0x10, 0x1, 0x7ab, 0x0, {{0x1c, 0x4, 0x1, 0x1a, 0x70, 0x65, 0x0, 0xb4, 0x4, 0x0, @multicast1, @empty, {[@generic={0x83, 0x8, "4bc2e8eb8a82"}, @ssrr={0x89, 0x23, 0xf1, [@local, @private=0xa010101, @rand_addr=0x64010100, @multicast2, @empty, @rand_addr=0x64010100, @remote, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0xdc, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x1d}]}, @ssrr={0x89, 0x13, 0x2a, [@remote, @multicast1, @local, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000013c0)={'gre0\x00', &(0x7f0000001340)={'gretap0\x00', r0, 0x8000, 0x80, 0x200, 0x7ff, {{0xb, 0x4, 0x3, 0x14, 0x2c, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast2, @remote, {[@end, @timestamp={0x44, 0x10, 0x64, 0x0, 0x7, [0x4, 0xfff, 0x0]}, @lsrr={0x83, 0x7, 0x49, [@rand_addr=0x64010101]}]}}}}}) 19:02:26 executing program 6: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa01, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x28000, 0x1c4) write$tun(r0, &(0x7f0000000080)={@void, @val={0x1, 0x80, 0x3ff, 0x83, 0xb000, 0xffe0}, @x25={0x3, 0x35, 0x0, "7558e70f112c1fa121008585ace1523d749dcfd469311dce70fe657b3b90b5702c4963a4d0f15083dc4ee19af3e8fc1438c81c3701cb95ab6d47b4a971cbc7be506eeaef747819aa7cf8b7139bbcee65875614c38ba0842d9bac5e658367a17cb8413acb2d6071b301f63ec0e9b49b89feb60030c2b9310a94dffc339c696b7cb5298c9a762f998f4064b4d1970ef9be082d8e603c186ff458c17ed6819dd7ee2a451be688b753283f2cf991d0b8266a8a4a1d8fb78932bf7ccf00bcd155181d384057d2b659b919cb973cf2a4351a6f4752a46dc9f13be568780f8ee9dbd7cdfd69c083f0"}}, 0xf2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x180000, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x2, 0x4, "81ad53", 0x7f, 0xd}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000340)={'\x00', 0x7, 0x1, 0x4}) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x10001, 0x1000]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) tgkill(0xffffffffffffffff, 0x0, 0x37) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getpid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000540)={0x3, 0x1, 0x0, 'queue0\x00', 0x3f}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r5, 0x87db92063309c3a1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c0) socketpair(0x1, 0x2, 0x4, &(0x7f0000000740)) clock_gettime(0x2, &(0x7f0000000780)) r6 = openat$cgroup_pressure(r3, &(0x7f0000000840)='memory.pressure\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x2000, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}, {@cache_none}, {@cache_mmap}, {@loose}, {@nodevmap}, {@cachetag={'cachetag', 0x3d, ']:+.//'}}], [{@uid_lt={'uid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@dont_hash}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@seclabel}, {@obj_user={'obj_user', 0x3d, 'queue0\x00'}}, {@dont_appraise}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}]}}) 19:02:26 executing program 2: sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '{\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x48}}, 0x40010) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&&\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x21) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000800)={'gre0\x00', 0x0, 0x7, 0x8, 0x8, 0x9, {{0x28, 0x4, 0x3, 0x2, 0xa0, 0x65, 0x0, 0x0, 0x29, 0x0, @remote, @multicast1, {[@cipso={0x86, 0x4c, 0x1, [{0x0, 0xe, "7474863bc31e27cb043686a8"}, {0x1, 0x11, "c82e293368e96b46f0df5d4ab8ded8"}, {0x1, 0xa, "a1b77b12ff9c8be7"}, {0x7, 0xd, "87cdd929447c09a66a71af"}, {0x2, 0x10, "291d04c262ca81c4e8f29e65e943"}]}, @timestamp_prespec={0x44, 0x2c, 0x41, 0x3, 0x3, [{@multicast2, 0x9}, {@multicast2, 0x8}, {@loopback, 0x200}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xae82}, {@multicast2, 0x1f}]}, @lsrr={0x83, 0x13, 0x80, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010102]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x6c, r0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x6c}}, 0x40800) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000c00)=0x3, 0x4) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r4, 0x410, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000dc0)=0x2, 0x4) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000e40), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x15, 0x2, 0x0, 0x1]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x60314082}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d5}, 0x80) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001080), r1) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040), 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x81) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40804) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001280), 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) 19:02:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}}, 0x4000001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x220, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000400}, 0x4000044) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0xa4000, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8801}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004080) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/dev/hwrng\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1f}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r4) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffff8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r7, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, r7, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000800}, 0x24000010) 19:02:26 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xfc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x80}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'tunl0\x00', r3, 0x7880, 0x8, 0x6, 0x4, {{0x23, 0x4, 0x3, 0xa, 0x8c, 0x64, 0x0, 0x1f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x72, 0x0, 0x7, [0x7, 0x4, 0x8, 0xfff, 0x8, 0x8000, 0x3, 0x81]}, @noop, @cipso={0x86, 0x4b, 0x1, [{0x6, 0x7, "97fec66cf0"}, {0x7, 0x3, ' '}, {0x7, 0xb, "2aaedf60654dadc728"}, {0x7, 0xb, "fdb51a934d247e5486"}, {0x1, 0x10, "e326ae74d77727a16f2620028e46"}, {0x6, 0x6, "27ddc017"}, {0x2, 0xf, "b1459ab2c508545f225554ce78"}]}]}}}}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xbcd}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc4) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000740)) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x48005}, 0x4004) unshare(0x400) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/module/nf_conntrack_sip', 0x2080, 0x100) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7e6a5a4b}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r7, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x10}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x800}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000085) 19:02:26 executing program 6: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa01, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x28000, 0x1c4) write$tun(r0, &(0x7f0000000080)={@void, @val={0x1, 0x80, 0x3ff, 0x83, 0xb000, 0xffe0}, @x25={0x3, 0x35, 0x0, "7558e70f112c1fa121008585ace1523d749dcfd469311dce70fe657b3b90b5702c4963a4d0f15083dc4ee19af3e8fc1438c81c3701cb95ab6d47b4a971cbc7be506eeaef747819aa7cf8b7139bbcee65875614c38ba0842d9bac5e658367a17cb8413acb2d6071b301f63ec0e9b49b89feb60030c2b9310a94dffc339c696b7cb5298c9a762f998f4064b4d1970ef9be082d8e603c186ff458c17ed6819dd7ee2a451be688b753283f2cf991d0b8266a8a4a1d8fb78932bf7ccf00bcd155181d384057d2b659b919cb973cf2a4351a6f4752a46dc9f13be568780f8ee9dbd7cdfd69c083f0"}}, 0xf2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x180000, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x2, 0x4, "81ad53", 0x7f, 0xd}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000340)={'\x00', 0x7, 0x1, 0x4}) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x10001, 0x1000]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) tgkill(0xffffffffffffffff, 0x0, 0x37) pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x80000) getpid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000540)={0x3, 0x1, 0x0, 'queue0\x00', 0x3f}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r4, 0x87db92063309c3a1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c0) socketpair(0x1, 0x2, 0x4, &(0x7f0000000740)) clock_gettime(0x2, &(0x7f0000000780)) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x2000, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@noextend}, {@cache_none}, {@cache_mmap}, {@loose}, {@nodevmap}, {@cachetag={'cachetag', 0x3d, ']:+.//'}}], [{@uid_lt={'uid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@dont_hash}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@seclabel}, {@obj_user={'obj_user', 0x3d, 'queue0\x00'}}, {@dont_appraise}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}]}}) 19:02:26 executing program 3: socketpair(0x27, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = socket(0x21, 0x6, 0x1f8) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/hidraw', 0x40002, 0x27) bind$802154_raw(r3, &(0x7f0000000200), 0x14) socketpair(0xb, 0x4, 0x2, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x4000000) accept(r2, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000400)=0x80) getpid() openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x98100, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ba}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20048080) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/sync_on_suspend', 0x1a1300, 0x80) ioctl$BINDER_CTL_ADD(r8, 0xc1086201, &(0x7f0000000700)={'binder0\x00'}) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000880), r5) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r9, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24004041) 19:02:26 executing program 2: sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '{\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x48}}, 0x40010) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&&\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x21) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000800)={'gre0\x00', 0x0, 0x7, 0x8, 0x8, 0x9, {{0x28, 0x4, 0x3, 0x2, 0xa0, 0x65, 0x0, 0x0, 0x29, 0x0, @remote, @multicast1, {[@cipso={0x86, 0x4c, 0x1, [{0x0, 0xe, "7474863bc31e27cb043686a8"}, {0x1, 0x11, "c82e293368e96b46f0df5d4ab8ded8"}, {0x1, 0xa, "a1b77b12ff9c8be7"}, {0x7, 0xd, "87cdd929447c09a66a71af"}, {0x2, 0x10, "291d04c262ca81c4e8f29e65e943"}]}, @timestamp_prespec={0x44, 0x2c, 0x41, 0x3, 0x3, [{@multicast2, 0x9}, {@multicast2, 0x8}, {@loopback, 0x200}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xae82}, {@multicast2, 0x1f}]}, @lsrr={0x83, 0x13, 0x80, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010102]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x6c, r0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x6c}}, 0x40800) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000c00)=0x3, 0x4) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r4, 0x410, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000dc0)=0x2, 0x4) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000e40), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x15, 0x2, 0x0, 0x1]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x60314082}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d5}, 0x80) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001080), r1) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040), 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x81) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40804) 19:02:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}}, 0x4000001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x220, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000400}, 0x4000044) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0xa4000, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8801}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004080) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/dev/hwrng\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1f}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r4) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffff8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r7, 0x100, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) 19:02:26 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r0, r1+60000000}, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x8, 0x400000, 0xffffffff, 0x5, 0x139f, 0x0, 0x3}, &(0x7f0000000100)={0x6, 0xffffffff, 0x9, 0x3f, 0x9, 0x2, 0x9, 0x4}, &(0x7f0000000140)={0x0, 0x1, 0x10001, 0x2, 0x6, 0x8, 0x50}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x400]}, 0x8}) ptrace(0x8, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x6}) wait4(0x0, &(0x7f0000000280), 0x10000001, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48840}, 0x40810) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8004) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000002600)={'ip6tnl0\x00', &(0x7f0000002580)={'sit0\x00', 0x0, 0x2f, 0xe1, 0x7f, 0x3, 0x4, @mcast2, @private0, 0x80, 0x20, 0x8, 0x7fff}}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000026c0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x3c, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002700), 0x82803, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000002740)) syz_genetlink_get_family_id$batadv(&(0x7f0000002780), r5) timer_create(0x6, &(0x7f00000027c0)={0x0, 0x2b}, &(0x7f0000002800)) accept(r5, &(0x7f0000002840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000028c0)=0x80) accept(r6, &(0x7f0000002900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000002980)=0x80) getgid() 19:02:26 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x1, 0x8, 0x0, 0x80000000, {{0xf, 0x4, 0x1, 0x13, 0x3c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x8, [{@broadcast, 0x602aa64f}, {@local, 0x3e3}]}, @end, @rr={0x7, 0xf, 0xc4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r1, 0x29, 0x80, 0x4, 0xff, 0x11, @loopback, @remote, 0x1, 0x7800, 0x8, 0x1}}) prctl$PR_GET_TIMERSLACK(0x1e) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/random', 0x602303, 0x8) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) prctl$PR_GET_CHILD_SUBREAPER(0x25) r4 = accept(r0, &(0x7f0000000340)=@l2, &(0x7f00000003c0)=0x80) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000400)={0xffff8000, [0x6, 0x800], 0x6}, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000001b80)={'ip6gre0\x00', &(0x7f0000001b00)={'ip6tnl0\x00', r1, 0x4, 0xff, 0x33, 0x668, 0x51, @remote, @loopback, 0x78b7, 0x40, 0x7f, 0xffffffff}}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000001c80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xecb559898a4f2fae}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x68, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x90) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d00), r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x1c, r7, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001e40), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x48, r8, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000c0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r7, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x1c}}, 0x8040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000002080)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000021c0)={'syztnl1\x00', &(0x7f00000020c0)={'syztnl0\x00', r9, 0x40, 0x7, 0x3623, 0x4, {{0x2e, 0x4, 0x3, 0x2, 0xb8, 0x67, 0x0, 0x5, 0x4, 0x0, @remote, @empty, {[@cipso={0x86, 0x23, 0x2, [{0x1, 0x5, "3b4d0e"}, {0x2, 0x10, "277eaf366496857b159683c6eef6"}, {0x1, 0x8, "88f634aa19fb"}]}, @end, @timestamp={0x44, 0xc, 0x80, 0x0, 0x6, [0x0, 0x1f6]}, @end, @cipso={0x86, 0x3d, 0x0, [{0x6, 0xb, "a25f5ca09e0f8d8163"}, {0x2, 0xb, "407a4af0bd1f5351ba"}, {0x2, 0x2}, {0x0, 0x8, "8a978367e5cd"}, {0x5, 0xe, "737f4f699e31e23d3115fe22"}, {0x6, 0x9, "337b2dd7dbdd06"}]}, @timestamp_prespec={0x44, 0x1c, 0x63, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x24}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc5}, {@private=0xa010101, 0x7ff}]}, @generic={0x94, 0x3, '_'}, @timestamp_addr={0x44, 0x14, 0xe5, 0x1, 0x0, [{@remote, 0x2}, {@local, 0x5}]}]}}}}}) 19:02:26 executing program 6: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa01, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x28000, 0x1c4) write$tun(r0, &(0x7f0000000080)={@void, @val={0x1, 0x80, 0x3ff, 0x83, 0xb000, 0xffe0}, @x25={0x3, 0x35, 0x0, "7558e70f112c1fa121008585ace1523d749dcfd469311dce70fe657b3b90b5702c4963a4d0f15083dc4ee19af3e8fc1438c81c3701cb95ab6d47b4a971cbc7be506eeaef747819aa7cf8b7139bbcee65875614c38ba0842d9bac5e658367a17cb8413acb2d6071b301f63ec0e9b49b89feb60030c2b9310a94dffc339c696b7cb5298c9a762f998f4064b4d1970ef9be082d8e603c186ff458c17ed6819dd7ee2a451be688b753283f2cf991d0b8266a8a4a1d8fb78932bf7ccf00bcd155181d384057d2b659b919cb973cf2a4351a6f4752a46dc9f13be568780f8ee9dbd7cdfd69c083f0"}}, 0xf2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x180000, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x2, 0x4, "81ad53", 0x7f, 0xd}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000340)={'\x00', 0x7, 0x1, 0x4}) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x10001, 0x1000]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) tgkill(0xffffffffffffffff, 0x0, 0x37) pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x80000) getpid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000540)={0x3, 0x1, 0x0, 'queue0\x00', 0x3f}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r4, 0x87db92063309c3a1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c0) socketpair(0x1, 0x2, 0x4, &(0x7f0000000740)) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x2000, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@noextend}, {@cache_none}, {@cache_mmap}, {@loose}, {@nodevmap}, {@cachetag={'cachetag', 0x3d, ']:+.//'}}], [{@uid_lt={'uid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@dont_hash}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@seclabel}, {@obj_user={'obj_user', 0x3d, 'queue0\x00'}}, {@dont_appraise}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}]}}) 19:02:26 executing program 2: sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '{\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x48}}, 0x40010) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&&\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x21) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000800)={'gre0\x00', 0x0, 0x7, 0x8, 0x8, 0x9, {{0x28, 0x4, 0x3, 0x2, 0xa0, 0x65, 0x0, 0x0, 0x29, 0x0, @remote, @multicast1, {[@cipso={0x86, 0x4c, 0x1, [{0x0, 0xe, "7474863bc31e27cb043686a8"}, {0x1, 0x11, "c82e293368e96b46f0df5d4ab8ded8"}, {0x1, 0xa, "a1b77b12ff9c8be7"}, {0x7, 0xd, "87cdd929447c09a66a71af"}, {0x2, 0x10, "291d04c262ca81c4e8f29e65e943"}]}, @timestamp_prespec={0x44, 0x2c, 0x41, 0x3, 0x3, [{@multicast2, 0x9}, {@multicast2, 0x8}, {@loopback, 0x200}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xae82}, {@multicast2, 0x1f}]}, @lsrr={0x83, 0x13, 0x80, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010102]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x6c, r0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x6c}}, 0x40800) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000c00)=0x3, 0x4) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r4, 0x410, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000dc0)=0x2, 0x4) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000e40), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x15, 0x2, 0x0, 0x1]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x60314082}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d5}, 0x80) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001080), r1) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001040), 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x81) 19:02:27 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x1, 0x94d, {{0x1c, 0x4, 0x3, 0x24, 0x70, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0x7fff, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x5f, 0x0, 0xc}, @rr={0x7, 0xb, 0x8c, [@empty, @private=0xa010102]}, @timestamp_addr={0x44, 0x14, 0xdb, 0x1, 0x7, [{@multicast2, 0xfff}, {@local, 0x6}]}, @timestamp={0x44, 0x24, 0xcc, 0x0, 0x8, [0xff, 0x3ff, 0xec1, 0x80000001, 0x1, 0x1f, 0xc39, 0x101]}, @end, @lsrr={0x83, 0xb, 0xd9, [@private=0xa010101, @loopback]}, @end, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r0, 0x4, 0x0, 0xfd, 0x8001, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x700, 0xfffffffe, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x700, 0x40, 0x7fffffff, 0xb9, {{0x4a, 0x4, 0x2, 0x4, 0x128, 0x65, 0x0, 0xfc, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x89, 0x2, [{0x5, 0x10, "9f29181b69af01b55c06b8f6b277"}, {0x0, 0xc, "a4ef1e80ef1608b70c64"}, {0x2, 0x11, "ec3c57df1ac6aa5c1925412a3a05cb"}, {0x1, 0xf, "fd471aad309012c0f9339859b0"}, {0x1, 0xe, "613a58ddf13874d8c39650e6"}, {0x7, 0x5, "a4c71d"}, {0x5, 0x10, "f7bd0403c7ca785911a862a70d9f"}, {0x2, 0x12, "0537146c916fb0eb46285324691a0431"}, {0x7, 0x12, "dfbb4ac3b415cd280ca08ccac92d57f3"}]}, @timestamp={0x44, 0x10, 0x40, 0x0, 0x8, [0x1, 0xff, 0x80000001]}, @ssrr={0x89, 0xf, 0x41, [@local, @multicast1, @multicast2]}, @lsrr={0x83, 0xf, 0xbd, [@private=0xa010102, @loopback, @multicast2]}, @timestamp_addr={0x44, 0x4c, 0x96, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x7e3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0x5}, {@multicast1, 0x7f}, {@multicast2, 0xffff}, {@local, 0x8000}, {@multicast2, 0x7}, {@remote, 0xf04}, {@multicast1, 0xc4}]}, @ssrr={0x89, 0xf, 0x7d, [@broadcast, @multicast2, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', r2, 0x2f, 0x0, 0x6, 0x3cd, 0x0, @local, @mcast1, 0x80, 0x8, 0xfffffff8, 0x5}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8091}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x0, 0x50a, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x93, 0x9e6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfc}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs2/binder-control\x00', 0x51b29de2a141c4ed, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000700)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000800)=""/54, 0x36}], 0x1, &(0x7f0000000880)=""/40, 0x28}, 0xbf3fbb63b6f404ed) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000900)={'tunl0\x00', r5, 0x40, 0x0, 0x3ff, 0x5, {{0x1f, 0x4, 0x2, 0x22, 0x7c, 0x65, 0x0, 0x5, 0x2f, 0x0, @broadcast, @loopback, {[@ssrr={0x89, 0x23, 0x86, [@loopback, @dev={0xac, 0x14, 0x14, 0x27}, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, @private=0xa010102, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x52, [@local, @empty, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp_addr={0x44, 0x2c, 0x16, 0x1, 0x6, [{@loopback}, {@loopback, 0x3}, {@remote, 0x4}, {@remote}, {@multicast1, 0x1ff}]}, @ra={0x94, 0x4}]}}}}}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/ehci_hcd', 0x240100, 0x22) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000013}, 0x811) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b80), 0x741a41, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000bc0)={{0x2, 0xfa}, {0x1, 0x6c}, 0xffffffc0, 0x1, 0xe7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000000c40)={0x400, 0x800, 0x73a75b41, 0x8, 0x1, 0xfb3}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/devices/msr', 0x400, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000001300)={'erspan0\x00', &(0x7f0000001240)={'tunl0\x00', r5, 0x10, 0x1, 0x7ab, 0x0, {{0x1c, 0x4, 0x1, 0x1a, 0x70, 0x65, 0x0, 0xb4, 0x4, 0x0, @multicast1, @empty, {[@generic={0x83, 0x8, "4bc2e8eb8a82"}, @ssrr={0x89, 0x23, 0xf1, [@local, @private=0xa010101, @rand_addr=0x64010100, @multicast2, @empty, @rand_addr=0x64010100, @remote, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0xdc, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x1d}]}, @ssrr={0x89, 0x13, 0x2a, [@remote, @multicast1, @local, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000013c0)={'gre0\x00', &(0x7f0000001340)={'gretap0\x00', r0, 0x8000, 0x80, 0x200, 0x7ff, {{0xb, 0x4, 0x3, 0x14, 0x2c, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast2, @remote, {[@end, @timestamp={0x44, 0x10, 0x64, 0x0, 0x7, [0x4, 0xfff, 0x0]}, @lsrr={0x83, 0x7, 0x49, [@rand_addr=0x64010101]}]}}}}}) [ 183.709480] Bluetooth: hci3: command 0x0406 tx timeout [ 183.709670] Bluetooth: hci1: command 0x0406 tx timeout [ 183.710445] Bluetooth: hci0: command 0x0406 tx timeout [ 183.711487] Bluetooth: hci4: command 0x0406 tx timeout [ 185.757379] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 185.758474] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.759192] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.760295] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 185.761690] Call Trace: [ 185.762561] [ 185.762884] __schedule+0x893/0x2470 [ 185.763865] ? io_schedule_timeout+0x150/0x150 [ 185.764540] ? do_raw_spin_lock+0x121/0x260 [ 185.765125] ? rwlock_bug.part.0+0x90/0x90 [ 185.765749] schedule+0xda/0x1b0 [ 185.766223] rescuer_thread+0x851/0xdb0 [ 185.766810] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.767516] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.768221] ? lockdep_hardirqs_on+0x79/0x100 [ 185.768891] ? worker_thread+0x1260/0x1260 [ 185.769518] kthread+0x2ed/0x3a0 [ 185.769987] ? kthread_complete_and_exit+0x40/0x40 [ 185.770697] ret_from_fork+0x22/0x30 [ 185.771239] [ 185.771600] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 185.772514] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.773208] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.774251] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 185.775410] Call Trace: [ 185.775761] [ 185.776084] __schedule+0x893/0x2470 [ 185.776649] ? io_schedule_timeout+0x150/0x150 [ 185.777270] ? do_raw_spin_lock+0x121/0x260 [ 185.777930] ? rwlock_bug.part.0+0x90/0x90 [ 185.778569] schedule+0xda/0x1b0 [ 185.779052] rescuer_thread+0x851/0xdb0 [ 185.779648] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.780408] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.781105] ? lockdep_hardirqs_on+0x79/0x100 [ 185.781775] ? worker_thread+0x1260/0x1260 [ 185.782396] kthread+0x2ed/0x3a0 [ 185.782869] ? kthread_complete_and_exit+0x40/0x40 [ 185.783571] ret_from_fork+0x22/0x30 [ 185.784115] [ 185.784477] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 185.785390] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.786084] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.787117] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 185.788256] Call Trace: [ 185.788642] [ 185.788975] __schedule+0x893/0x2470 [ 185.789567] ? io_schedule_timeout+0x150/0x150 [ 185.790197] ? do_raw_spin_lock+0x121/0x260 [ 185.790832] ? rwlock_bug.part.0+0x90/0x90 [ 185.791465] schedule+0xda/0x1b0 [ 185.791948] rescuer_thread+0x851/0xdb0 [ 185.792551] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.793234] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.793954] ? lockdep_hardirqs_on+0x79/0x100 [ 185.794613] ? worker_thread+0x1260/0x1260 [ 185.795192] kthread+0x2ed/0x3a0 [ 185.795701] ? kthread_complete_and_exit+0x40/0x40 [ 185.796431] ret_from_fork+0x22/0x30 [ 185.796971] [ 185.797294] INFO: task netns:6 blocked for more than 143 seconds. [ 185.798145] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.798908] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.799968] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 185.801134] Call Trace: [ 185.801534] [ 185.801853] __schedule+0x893/0x2470 [ 185.802420] ? io_schedule_timeout+0x150/0x150 [ 185.803044] ? do_raw_spin_lock+0x121/0x260 [ 185.803664] ? rwlock_bug.part.0+0x90/0x90 [ 185.804255] schedule+0xda/0x1b0 [ 185.804769] rescuer_thread+0x851/0xdb0 [ 185.805351] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.806018] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.806723] ? lockdep_hardirqs_on+0x79/0x100 [ 185.807372] ? worker_thread+0x1260/0x1260 [ 185.807950] kthread+0x2ed/0x3a0 [ 185.808464] ? kthread_complete_and_exit+0x40/0x40 [ 185.809126] ret_from_fork+0x22/0x30 [ 185.809709] [ 185.810041] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 185.810961] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.811711] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.812794] task:kworker/0:0H state:I stack:29464 pid:8 ppid:2 flags:0x00004000 [ 185.813956] Workqueue: 0x0 (kblockd) [ 185.814541] Call Trace: [ 185.814903] [ 185.815227] __schedule+0x893/0x2470 [ 185.815805] ? io_schedule_timeout+0x150/0x150 [ 185.816520] schedule+0xda/0x1b0 [ 185.817004] worker_thread+0x15f/0x1260 [ 185.817637] ? process_one_work+0x16a0/0x16a0 [ 185.818273] kthread+0x2ed/0x3a0 [ 185.818794] ? kthread_complete_and_exit+0x40/0x40 [ 185.819514] ret_from_fork+0x22/0x30 [ 185.820083] [ 185.820456] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 185.821399] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.822119] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.823179] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 185.824350] Call Trace: [ 185.824713] [ 185.825037] __schedule+0x893/0x2470 [ 185.825616] ? io_schedule_timeout+0x150/0x150 [ 185.826252] ? do_raw_spin_lock+0x121/0x260 [ 185.826896] ? rwlock_bug.part.0+0x90/0x90 [ 185.827537] schedule+0xda/0x1b0 [ 185.828025] rescuer_thread+0x851/0xdb0 [ 185.828640] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.829375] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.830080] ? lockdep_hardirqs_on+0x79/0x100 [ 185.830739] ? worker_thread+0x1260/0x1260 [ 185.831377] kthread+0x2ed/0x3a0 [ 185.831853] ? kthread_complete_and_exit+0x40/0x40 [ 185.832581] ret_from_fork+0x22/0x30 [ 185.833117] [ 185.833482] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 185.834481] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.835214] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.836271] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 185.837414] Call Trace: [ 185.837760] [ 185.838075] __schedule+0x893/0x2470 [ 185.838654] ? io_schedule_timeout+0x150/0x150 [ 185.839275] ? mark_held_locks+0x9e/0xe0 [ 185.839870] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.840604] schedule+0xda/0x1b0 [ 185.841075] rcu_tasks_one_gp+0x3db/0xc10 [ 185.841704] rcu_tasks_kthread+0x80/0xa0 [ 185.842267] ? rcu_tasks_postscan+0x10/0x10 [ 185.842912] kthread+0x2ed/0x3a0 [ 185.843439] ? kthread_complete_and_exit+0x40/0x40 [ 185.844130] ret_from_fork+0x22/0x30 [ 185.844721] [ 185.845063] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 185.846019] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.846788] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.847850] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 185.849028] Workqueue: 0x0 (events_highpri) [ 185.849670] Call Trace: [ 185.850027] [ 185.850387] __schedule+0x893/0x2470 [ 185.850915] ? io_schedule_timeout+0x150/0x150 [ 185.851610] schedule+0xda/0x1b0 [ 185.852108] worker_thread+0x15f/0x1260 [ 185.852710] ? process_one_work+0x16a0/0x16a0 [ 185.853360] kthread+0x2ed/0x3a0 [ 185.853834] ? kthread_complete_and_exit+0x40/0x40 [ 185.854535] ret_from_fork+0x22/0x30 [ 185.855066] [ 185.855423] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 185.856334] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.857039] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.858076] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 185.859191] Call Trace: [ 185.859584] [ 185.859908] __schedule+0x893/0x2470 [ 185.860507] ? io_schedule_timeout+0x150/0x150 [ 185.861149] ? do_raw_spin_lock+0x121/0x260 [ 185.861787] ? rwlock_bug.part.0+0x90/0x90 [ 185.862420] schedule+0xda/0x1b0 [ 185.862906] rescuer_thread+0x851/0xdb0 [ 185.863505] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.864207] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.864941] ? lockdep_hardirqs_on+0x79/0x100 [ 185.865608] ? worker_thread+0x1260/0x1260 [ 185.866190] kthread+0x2ed/0x3a0 [ 185.866695] ? kthread_complete_and_exit+0x40/0x40 [ 185.867393] ret_from_fork+0x22/0x30 [ 185.867935] [ 185.868824] INFO: task kblockd:30 blocked for more than 143 seconds. [ 185.869713] Not tainted 6.0.0-rc7-next-20220930 #1 [ 185.870458] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.871494] task:kblockd state:I stack:30176 pid:30 ppid:2 flags:0x00004000 [ 185.872661] Call Trace: [ 185.873014] [ 185.873358] __schedule+0x893/0x2470 [ 185.873880] ? io_schedule_timeout+0x150/0x150 [ 185.874522] ? do_raw_spin_lock+0x121/0x260 [ 185.875107] ? rwlock_bug.part.0+0x90/0x90 [ 185.875719] schedule+0xda/0x1b0 [ 185.876213] rescuer_thread+0x851/0xdb0 [ 185.876785] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.877493] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 185.878166] ? lockdep_hardirqs_on+0x79/0x100 [ 185.878809] ? worker_thread+0x1260/0x1260 [ 185.879414] kthread+0x2ed/0x3a0 [ 185.879877] ? kthread_complete_and_exit+0x40/0x40 [ 185.880592] ret_from_fork+0x22/0x30 [ 185.881136] [ 185.881558] [ 185.881558] Showing all locks held in the system: [ 185.882425] 1 lock held by rcu_tasks_kthre/11: [ 185.883053] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 185.884442] 1 lock held by khungtaskd/25: [ 185.884998] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 185.886274] 1 lock held by systemd-journal/111: [ 185.886924] 1 lock held by in:imklog/187: [ 185.887512] 2 locks held by syz-executor/5527: [ 185.888135] [ 185.888418] ============================================= [ 185.888418] 19:02:41 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r0, r1+60000000}, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x8, 0x400000, 0xffffffff, 0x5, 0x139f, 0x0, 0x3}, &(0x7f0000000100)={0x6, 0xffffffff, 0x9, 0x3f, 0x9, 0x2, 0x9, 0x4}, &(0x7f0000000140)={0x0, 0x1, 0x10001, 0x2, 0x6, 0x8, 0x50}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x400]}, 0x8}) ptrace(0x8, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x6}) wait4(0x0, &(0x7f0000000280), 0x10000001, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48840}, 0x40810) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8004) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000002600)={'ip6tnl0\x00', &(0x7f0000002580)={'sit0\x00', 0x0, 0x2f, 0xe1, 0x7f, 0x3, 0x4, @mcast2, @private0, 0x80, 0x20, 0x8, 0x7fff}}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000026c0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x3c, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002700), 0x82803, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000002740)) syz_genetlink_get_family_id$batadv(&(0x7f0000002780), r5) timer_create(0x6, &(0x7f00000027c0)={0x0, 0x2b}, &(0x7f0000002800)) accept(r5, &(0x7f0000002840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000028c0)=0x80) getgid() 19:02:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}}, 0x4000001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x220, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000400}, 0x4000044) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0xa4000, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8801}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004080) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/dev/hwrng\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1f}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r4) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffff8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) 19:02:41 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x1, 0x94d, {{0x1c, 0x4, 0x3, 0x24, 0x70, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0x7fff, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x5f, 0x0, 0xc}, @rr={0x7, 0xb, 0x8c, [@empty, @private=0xa010102]}, @timestamp_addr={0x44, 0x14, 0xdb, 0x1, 0x7, [{@multicast2, 0xfff}, {@local, 0x6}]}, @timestamp={0x44, 0x24, 0xcc, 0x0, 0x8, [0xff, 0x3ff, 0xec1, 0x80000001, 0x1, 0x1f, 0xc39, 0x101]}, @end, @lsrr={0x83, 0xb, 0xd9, [@private=0xa010101, @loopback]}, @end, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r0, 0x4, 0x0, 0xfd, 0x8001, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x700, 0xfffffffe, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x700, 0x40, 0x7fffffff, 0xb9, {{0x4a, 0x4, 0x2, 0x4, 0x128, 0x65, 0x0, 0xfc, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x89, 0x2, [{0x5, 0x10, "9f29181b69af01b55c06b8f6b277"}, {0x0, 0xc, "a4ef1e80ef1608b70c64"}, {0x2, 0x11, "ec3c57df1ac6aa5c1925412a3a05cb"}, {0x1, 0xf, "fd471aad309012c0f9339859b0"}, {0x1, 0xe, "613a58ddf13874d8c39650e6"}, {0x7, 0x5, "a4c71d"}, {0x5, 0x10, "f7bd0403c7ca785911a862a70d9f"}, {0x2, 0x12, "0537146c916fb0eb46285324691a0431"}, {0x7, 0x12, "dfbb4ac3b415cd280ca08ccac92d57f3"}]}, @timestamp={0x44, 0x10, 0x40, 0x0, 0x8, [0x1, 0xff, 0x80000001]}, @ssrr={0x89, 0xf, 0x41, [@local, @multicast1, @multicast2]}, @lsrr={0x83, 0xf, 0xbd, [@private=0xa010102, @loopback, @multicast2]}, @timestamp_addr={0x44, 0x4c, 0x96, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x7e3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0x5}, {@multicast1, 0x7f}, {@multicast2, 0xffff}, {@local, 0x8000}, {@multicast2, 0x7}, {@remote, 0xf04}, {@multicast1, 0xc4}]}, @ssrr={0x89, 0xf, 0x7d, [@broadcast, @multicast2, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', r2, 0x2f, 0x0, 0x6, 0x3cd, 0x0, @local, @mcast1, 0x80, 0x8, 0xfffffff8, 0x5}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8091}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x0, 0x50a, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x93, 0x9e6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfc}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs2/binder-control\x00', 0x51b29de2a141c4ed, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000700)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000800)=""/54, 0x36}], 0x1, &(0x7f0000000880)=""/40, 0x28}, 0xbf3fbb63b6f404ed) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000900)={'tunl0\x00', r5, 0x40, 0x0, 0x3ff, 0x5, {{0x1f, 0x4, 0x2, 0x22, 0x7c, 0x65, 0x0, 0x5, 0x2f, 0x0, @broadcast, @loopback, {[@ssrr={0x89, 0x23, 0x86, [@loopback, @dev={0xac, 0x14, 0x14, 0x27}, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, @private=0xa010102, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x52, [@local, @empty, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp_addr={0x44, 0x2c, 0x16, 0x1, 0x6, [{@loopback}, {@loopback, 0x3}, {@remote, 0x4}, {@remote}, {@multicast1, 0x1ff}]}, @ra={0x94, 0x4}]}}}}}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/ehci_hcd', 0x240100, 0x22) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000013}, 0x811) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b80), 0x741a41, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000bc0)={{0x2, 0xfa}, {0x1, 0x6c}, 0xffffffc0, 0x1, 0xe7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000000c40)={0x400, 0x800, 0x73a75b41, 0x8, 0x1, 0xfb3}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/devices/msr', 0x400, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000001300)={'erspan0\x00', &(0x7f0000001240)={'tunl0\x00', r5, 0x10, 0x1, 0x7ab, 0x0, {{0x1c, 0x4, 0x1, 0x1a, 0x70, 0x65, 0x0, 0xb4, 0x4, 0x0, @multicast1, @empty, {[@generic={0x83, 0x8, "4bc2e8eb8a82"}, @ssrr={0x89, 0x23, 0xf1, [@local, @private=0xa010101, @rand_addr=0x64010100, @multicast2, @empty, @rand_addr=0x64010100, @remote, @multicast2]}, @timestamp_prespec={0x44, 0x1c, 0xdc, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x1d}]}, @ssrr={0x89, 0x13, 0x2a, [@remote, @multicast1, @local, @remote]}]}}}}}) 19:02:41 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xfc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x80}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'tunl0\x00', r3, 0x7880, 0x8, 0x6, 0x4, {{0x23, 0x4, 0x3, 0xa, 0x8c, 0x64, 0x0, 0x1f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x72, 0x0, 0x7, [0x7, 0x4, 0x8, 0xfff, 0x8, 0x8000, 0x3, 0x81]}, @noop, @cipso={0x86, 0x4b, 0x1, [{0x6, 0x7, "97fec66cf0"}, {0x7, 0x3, ' '}, {0x7, 0xb, "2aaedf60654dadc728"}, {0x7, 0xb, "fdb51a934d247e5486"}, {0x1, 0x10, "e326ae74d77727a16f2620028e46"}, {0x6, 0x6, "27ddc017"}, {0x2, 0xf, "b1459ab2c508545f225554ce78"}]}]}}}}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xbcd}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc4) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000740)) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x48005}, 0x4004) unshare(0x400) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/module/nf_conntrack_sip', 0x2080, 0x100) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7e6a5a4b}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a40), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r7, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x10}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044) 19:02:41 executing program 6: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa01, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x28000, 0x1c4) write$tun(r0, &(0x7f0000000080)={@void, @val={0x1, 0x80, 0x3ff, 0x83, 0xb000, 0xffe0}, @x25={0x3, 0x35, 0x0, "7558e70f112c1fa121008585ace1523d749dcfd469311dce70fe657b3b90b5702c4963a4d0f15083dc4ee19af3e8fc1438c81c3701cb95ab6d47b4a971cbc7be506eeaef747819aa7cf8b7139bbcee65875614c38ba0842d9bac5e658367a17cb8413acb2d6071b301f63ec0e9b49b89feb60030c2b9310a94dffc339c696b7cb5298c9a762f998f4064b4d1970ef9be082d8e603c186ff458c17ed6819dd7ee2a451be688b753283f2cf991d0b8266a8a4a1d8fb78932bf7ccf00bcd155181d384057d2b659b919cb973cf2a4351a6f4752a46dc9f13be568780f8ee9dbd7cdfd69c083f0"}}, 0xf2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x180000, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x2, 0x4, "81ad53", 0x7f, 0xd}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000340)={'\x00', 0x7, 0x1, 0x4}) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x10001, 0x1000]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) tgkill(0xffffffffffffffff, 0x0, 0x37) pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x80000) getpid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000540)={0x3, 0x1, 0x0, 'queue0\x00', 0x3f}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r4, 0x87db92063309c3a1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c0) socketpair(0x1, 0x2, 0x4, &(0x7f0000000740)) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x2000, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@noextend}, {@cache_none}, {@cache_mmap}, {@loose}, {@nodevmap}, {@cachetag={'cachetag', 0x3d, ']:+.//'}}], [{@uid_lt={'uid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@dont_hash}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@seclabel}, {@obj_user={'obj_user', 0x3d, 'queue0\x00'}}, {@dont_appraise}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}]}}) 19:02:41 executing program 3: socketpair(0x27, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = socket(0x21, 0x6, 0x1f8) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/hidraw', 0x40002, 0x27) bind$802154_raw(r3, &(0x7f0000000200), 0x14) socketpair(0xb, 0x4, 0x2, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x4000000) accept(r2, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000400)=0x80) getpid() openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x98100, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ba}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20048080) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/sync_on_suspend', 0x1a1300, 0x80) ioctl$BINDER_CTL_ADD(r8, 0xc1086201, &(0x7f0000000700)={'binder0\x00'}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000880), r5) 19:02:41 executing program 2: sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '{\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x48}}, 0x40010) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&&\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x21) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000800)={'gre0\x00', 0x0, 0x7, 0x8, 0x8, 0x9, {{0x28, 0x4, 0x3, 0x2, 0xa0, 0x65, 0x0, 0x0, 0x29, 0x0, @remote, @multicast1, {[@cipso={0x86, 0x4c, 0x1, [{0x0, 0xe, "7474863bc31e27cb043686a8"}, {0x1, 0x11, "c82e293368e96b46f0df5d4ab8ded8"}, {0x1, 0xa, "a1b77b12ff9c8be7"}, {0x7, 0xd, "87cdd929447c09a66a71af"}, {0x2, 0x10, "291d04c262ca81c4e8f29e65e943"}]}, @timestamp_prespec={0x44, 0x2c, 0x41, 0x3, 0x3, [{@multicast2, 0x9}, {@multicast2, 0x8}, {@loopback, 0x200}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xae82}, {@multicast2, 0x1f}]}, @lsrr={0x83, 0x13, 0x80, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010102]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x6c, r0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x6c}}, 0x40800) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000c00)=0x3, 0x4) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r4, 0x410, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000dc0)=0x2, 0x4) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000e40), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x15, 0x2, 0x0, 0x1]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x60314082}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d5}, 0x80) syz_genetlink_get_family_id$SEG6(&(0x7f0000001080), r1) 19:02:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x1, 0x8, 0x0, 0x80000000, {{0xf, 0x4, 0x1, 0x13, 0x3c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x8, [{@broadcast, 0x602aa64f}, {@local, 0x3e3}]}, @end, @rr={0x7, 0xf, 0xc4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r1, 0x29, 0x80, 0x4, 0xff, 0x11, @loopback, @remote, 0x1, 0x7800, 0x8, 0x1}}) prctl$PR_GET_TIMERSLACK(0x1e) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/random', 0x602303, 0x8) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) prctl$PR_GET_CHILD_SUBREAPER(0x25) r4 = accept(r0, &(0x7f0000000340)=@l2, &(0x7f00000003c0)=0x80) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000400)={0xffff8000, [0x6, 0x800], 0x6}, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000001b80)={'ip6gre0\x00', &(0x7f0000001b00)={'ip6tnl0\x00', r1, 0x4, 0xff, 0x33, 0x668, 0x51, @remote, @loopback, 0x78b7, 0x40, 0x7f, 0xffffffff}}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000001c80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xecb559898a4f2fae}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x68, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x90) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d00), r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x1c, r7, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001e40), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x48, r8, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000c0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r7, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x1c}}, 0x8040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000002080)) 19:02:42 executing program 6: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa01, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x28000, 0x1c4) write$tun(r0, &(0x7f0000000080)={@void, @val={0x1, 0x80, 0x3ff, 0x83, 0xb000, 0xffe0}, @x25={0x3, 0x35, 0x0, "7558e70f112c1fa121008585ace1523d749dcfd469311dce70fe657b3b90b5702c4963a4d0f15083dc4ee19af3e8fc1438c81c3701cb95ab6d47b4a971cbc7be506eeaef747819aa7cf8b7139bbcee65875614c38ba0842d9bac5e658367a17cb8413acb2d6071b301f63ec0e9b49b89feb60030c2b9310a94dffc339c696b7cb5298c9a762f998f4064b4d1970ef9be082d8e603c186ff458c17ed6819dd7ee2a451be688b753283f2cf991d0b8266a8a4a1d8fb78932bf7ccf00bcd155181d384057d2b659b919cb973cf2a4351a6f4752a46dc9f13be568780f8ee9dbd7cdfd69c083f0"}}, 0xf2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x180000, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x2, 0x4, "81ad53", 0x7f, 0xd}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000340)={'\x00', 0x7, 0x1, 0x4}) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x10001, 0x1000]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) tgkill(0xffffffffffffffff, 0x0, 0x37) pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x80000) getpid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000540)={0x3, 0x1, 0x0, 'queue0\x00', 0x3f}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r4, 0x87db92063309c3a1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c0) socketpair(0x1, 0x2, 0x4, &(0x7f0000000740)) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x2000, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@noextend}, {@cache_none}, {@cache_mmap}, {@loose}, {@nodevmap}, {@cachetag={'cachetag', 0x3d, ']:+.//'}}], [{@uid_lt={'uid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@dont_hash}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@seclabel}, {@obj_user={'obj_user', 0x3d, 'queue0\x00'}}, {@dont_appraise}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}]}}) 19:02:42 executing program 2: sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '{\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x48}}, 0x40010) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&&\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x21) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000800)={'gre0\x00', 0x0, 0x7, 0x8, 0x8, 0x9, {{0x28, 0x4, 0x3, 0x2, 0xa0, 0x65, 0x0, 0x0, 0x29, 0x0, @remote, @multicast1, {[@cipso={0x86, 0x4c, 0x1, [{0x0, 0xe, "7474863bc31e27cb043686a8"}, {0x1, 0x11, "c82e293368e96b46f0df5d4ab8ded8"}, {0x1, 0xa, "a1b77b12ff9c8be7"}, {0x7, 0xd, "87cdd929447c09a66a71af"}, {0x2, 0x10, "291d04c262ca81c4e8f29e65e943"}]}, @timestamp_prespec={0x44, 0x2c, 0x41, 0x3, 0x3, [{@multicast2, 0x9}, {@multicast2, 0x8}, {@loopback, 0x200}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xae82}, {@multicast2, 0x1f}]}, @lsrr={0x83, 0x13, 0x80, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010102]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x6c, r0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x6c}}, 0x40800) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000c00)=0x3, 0x4) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r4, 0x410, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000dc0)=0x2, 0x4) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000e40), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x15, 0x2, 0x0, 0x1]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x60314082}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d5}, 0x80) 19:02:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}}, 0x4000001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x220, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000400}, 0x4000044) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400), 0xa4000, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8801}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004080) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/dev/hwrng\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x64, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1f}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r4) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffff8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), r0) 19:02:42 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000040)={r0, r1+60000000}, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x8, 0x400000, 0xffffffff, 0x5, 0x139f, 0x0, 0x3}, &(0x7f0000000100)={0x6, 0xffffffff, 0x9, 0x3f, 0x9, 0x2, 0x9, 0x4}, &(0x7f0000000140)={0x0, 0x1, 0x10001, 0x2, 0x6, 0x8, 0x50}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x400]}, 0x8}) ptrace(0x8, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x6}) wait4(0x0, &(0x7f0000000280), 0x10000001, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48840}, 0x40810) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8004) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000002600)={'ip6tnl0\x00', &(0x7f0000002580)={'sit0\x00', 0x0, 0x2f, 0xe1, 0x7f, 0x3, 0x4, @mcast2, @private0, 0x80, 0x20, 0x8, 0x7fff}}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000026c0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x3c, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002700), 0x82803, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000002740)) syz_genetlink_get_family_id$batadv(&(0x7f0000002780), r5) timer_create(0x6, &(0x7f00000027c0)={0x0, 0x2b}, &(0x7f0000002800)) getgid() 19:02:42 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0xfc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x80}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'tunl0\x00', r3, 0x7880, 0x8, 0x6, 0x4, {{0x23, 0x4, 0x3, 0xa, 0x8c, 0x64, 0x0, 0x1f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x72, 0x0, 0x7, [0x7, 0x4, 0x8, 0xfff, 0x8, 0x8000, 0x3, 0x81]}, @noop, @cipso={0x86, 0x4b, 0x1, [{0x6, 0x7, "97fec66cf0"}, {0x7, 0x3, ' '}, {0x7, 0xb, "2aaedf60654dadc728"}, {0x7, 0xb, "fdb51a934d247e5486"}, {0x1, 0x10, "e326ae74d77727a16f2620028e46"}, {0x6, 0x6, "27ddc017"}, {0x2, 0xf, "b1459ab2c508545f225554ce78"}]}]}}}}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xbcd}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc4) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000740)) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x48005}, 0x4004) unshare(0x400) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/module/nf_conntrack_sip', 0x2080, 0x100) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7e6a5a4b}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x10}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044) 19:02:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x1, 0x8, 0x0, 0x80000000, {{0xf, 0x4, 0x1, 0x13, 0x3c, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x8, [{@broadcast, 0x602aa64f}, {@local, 0x3e3}]}, @end, @rr={0x7, 0xf, 0xc4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r1, 0x29, 0x80, 0x4, 0xff, 0x11, @loopback, @remote, 0x1, 0x7800, 0x8, 0x1}}) prctl$PR_GET_TIMERSLACK(0x1e) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/random', 0x602303, 0x8) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) prctl$PR_GET_CHILD_SUBREAPER(0x25) r4 = accept(r0, &(0x7f0000000340)=@l2, &(0x7f00000003c0)=0x80) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000400)={0xffff8000, [0x6, 0x800], 0x6}, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000001b80)={'ip6gre0\x00', &(0x7f0000001b00)={'ip6tnl0\x00', r1, 0x4, 0xff, 0x33, 0x668, 0x51, @remote, @loopback, 0x78b7, 0x40, 0x7f, 0xffffffff}}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000001c80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xecb559898a4f2fae}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x68, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040040}, 0x90) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000001d00), r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x1c, r7, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001e40), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x48, r8, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000c0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r7, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}]}, 0x1c}}, 0x8040) 19:02:42 executing program 6: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa01, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x28000, 0x1c4) write$tun(r0, &(0x7f0000000080)={@void, @val={0x1, 0x80, 0x3ff, 0x83, 0xb000, 0xffe0}, @x25={0x3, 0x35, 0x0, "7558e70f112c1fa121008585ace1523d749dcfd469311dce70fe657b3b90b5702c4963a4d0f15083dc4ee19af3e8fc1438c81c3701cb95ab6d47b4a971cbc7be506eeaef747819aa7cf8b7139bbcee65875614c38ba0842d9bac5e658367a17cb8413acb2d6071b301f63ec0e9b49b89feb60030c2b9310a94dffc339c696b7cb5298c9a762f998f4064b4d1970ef9be082d8e603c186ff458c17ed6819dd7ee2a451be688b753283f2cf991d0b8266a8a4a1d8fb78932bf7ccf00bcd155181d384057d2b659b919cb973cf2a4351a6f4752a46dc9f13be568780f8ee9dbd7cdfd69c083f0"}}, 0xf2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x180000, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x2, 0x4, "81ad53", 0x7f, 0xd}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000340)={'\x00', 0x7, 0x1, 0x4}) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x10001, 0x1000]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) tgkill(0xffffffffffffffff, 0x0, 0x37) pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x80000) getpid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000540)={0x3, 0x1, 0x0, 'queue0\x00', 0x3f}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r4, 0x87db92063309c3a1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c0) clock_gettime(0x2, &(0x7f0000000780)) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x2000, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@noextend}, {@cache_none}, {@cache_mmap}, {@loose}, {@nodevmap}, {@cachetag={'cachetag', 0x3d, ']:+.//'}}], [{@uid_lt={'uid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@dont_hash}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@seclabel}, {@obj_user={'obj_user', 0x3d, 'queue0\x00'}}, {@dont_appraise}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}]}}) 19:02:42 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x1, 0x40, 0x1, 0x94d, {{0x1c, 0x4, 0x3, 0x24, 0x70, 0x66, 0x0, 0x81, 0x2f, 0x0, @private=0x7fff, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x5f, 0x0, 0xc}, @rr={0x7, 0xb, 0x8c, [@empty, @private=0xa010102]}, @timestamp_addr={0x44, 0x14, 0xdb, 0x1, 0x7, [{@multicast2, 0xfff}, {@local, 0x6}]}, @timestamp={0x44, 0x24, 0xcc, 0x0, 0x8, [0xff, 0x3ff, 0xec1, 0x80000001, 0x1, 0x1f, 0xc39, 0x101]}, @end, @lsrr={0x83, 0xb, 0xd9, [@private=0xa010101, @loopback]}, @end, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r0, 0x4, 0x0, 0xfd, 0x8001, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x700, 0xfffffffe, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', r1, 0x700, 0x40, 0x7fffffff, 0xb9, {{0x4a, 0x4, 0x2, 0x4, 0x128, 0x65, 0x0, 0xfc, 0x29, 0x0, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x89, 0x2, [{0x5, 0x10, "9f29181b69af01b55c06b8f6b277"}, {0x0, 0xc, "a4ef1e80ef1608b70c64"}, {0x2, 0x11, "ec3c57df1ac6aa5c1925412a3a05cb"}, {0x1, 0xf, "fd471aad309012c0f9339859b0"}, {0x1, 0xe, "613a58ddf13874d8c39650e6"}, {0x7, 0x5, "a4c71d"}, {0x5, 0x10, "f7bd0403c7ca785911a862a70d9f"}, {0x2, 0x12, "0537146c916fb0eb46285324691a0431"}, {0x7, 0x12, "dfbb4ac3b415cd280ca08ccac92d57f3"}]}, @timestamp={0x44, 0x10, 0x40, 0x0, 0x8, [0x1, 0xff, 0x80000001]}, @ssrr={0x89, 0xf, 0x41, [@local, @multicast1, @multicast2]}, @lsrr={0x83, 0xf, 0xbd, [@private=0xa010102, @loopback, @multicast2]}, @timestamp_addr={0x44, 0x4c, 0x96, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x7e3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@remote, 0x5}, {@multicast1, 0x7f}, {@multicast2, 0xffff}, {@local, 0x8000}, {@multicast2, 0x7}, {@remote, 0xf04}, {@multicast1, 0xc4}]}, @ssrr={0x89, 0xf, 0x7d, [@broadcast, @multicast2, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', r2, 0x2f, 0x0, 0x6, 0x3cd, 0x0, @local, @mcast1, 0x80, 0x8, 0xfffffff8, 0x5}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8091}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x60, 0x0, 0x50a, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x93, 0x9e6]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfc}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs2/binder-control\x00', 0x51b29de2a141c4ed, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000700)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000800)=""/54, 0x36}], 0x1, &(0x7f0000000880)=""/40, 0x28}, 0xbf3fbb63b6f404ed) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000900)={'tunl0\x00', r5, 0x40, 0x0, 0x3ff, 0x5, {{0x1f, 0x4, 0x2, 0x22, 0x7c, 0x65, 0x0, 0x5, 0x2f, 0x0, @broadcast, @loopback, {[@ssrr={0x89, 0x23, 0x86, [@loopback, @dev={0xac, 0x14, 0x14, 0x27}, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x39}, @broadcast, @private=0xa010102, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x52, [@local, @empty, @dev={0xac, 0x14, 0x14, 0x2b}]}, @timestamp_addr={0x44, 0x2c, 0x16, 0x1, 0x6, [{@loopback}, {@loopback, 0x3}, {@remote, 0x4}, {@remote}, {@multicast1, 0x1ff}]}, @ra={0x94, 0x4}]}}}}}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/module/ehci_hcd', 0x240100, 0x22) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000013}, 0x811) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b80), 0x741a41, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r8, 0xc0505350, &(0x7f0000000bc0)={{0x2, 0xfa}, {0x1, 0x6c}, 0xffffffc0, 0x1, 0xe7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000000c40)={0x400, 0x800, 0x73a75b41, 0x8, 0x1, 0xfb3}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001200)='/sys/devices/msr', 0x400, 0x1) 19:02:42 executing program 2: sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '{\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x48}}, 0x40010) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&&\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x21) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000800)={'gre0\x00', 0x0, 0x7, 0x8, 0x8, 0x9, {{0x28, 0x4, 0x3, 0x2, 0xa0, 0x65, 0x0, 0x0, 0x29, 0x0, @remote, @multicast1, {[@cipso={0x86, 0x4c, 0x1, [{0x0, 0xe, "7474863bc31e27cb043686a8"}, {0x1, 0x11, "c82e293368e96b46f0df5d4ab8ded8"}, {0x1, 0xa, "a1b77b12ff9c8be7"}, {0x7, 0xd, "87cdd929447c09a66a71af"}, {0x2, 0x10, "291d04c262ca81c4e8f29e65e943"}]}, @timestamp_prespec={0x44, 0x2c, 0x41, 0x3, 0x3, [{@multicast2, 0x9}, {@multicast2, 0x8}, {@loopback, 0x200}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xae82}, {@multicast2, 0x1f}]}, @lsrr={0x83, 0x13, 0x80, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010102]}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x6c, r0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x6c}}, 0x40800) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000c00)=0x3, 0x4) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r4, 0x410, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000dc0)=0x2, 0x4) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000e40), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r5, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x15, 0x2, 0x0, 0x1]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 19:02:42 executing program 6: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa01, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x28000, 0x1c4) write$tun(r0, &(0x7f0000000080)={@void, @val={0x1, 0x80, 0x3ff, 0x83, 0xb000, 0xffe0}, @x25={0x3, 0x35, 0x0, "7558e70f112c1fa121008585ace1523d749dcfd469311dce70fe657b3b90b5702c4963a4d0f15083dc4ee19af3e8fc1438c81c3701cb95ab6d47b4a971cbc7be506eeaef747819aa7cf8b7139bbcee65875614c38ba0842d9bac5e658367a17cb8413acb2d6071b301f63ec0e9b49b89feb60030c2b9310a94dffc339c696b7cb5298c9a762f998f4064b4d1970ef9be082d8e603c186ff458c17ed6819dd7ee2a451be688b753283f2cf991d0b8266a8a4a1d8fb78932bf7ccf00bcd155181d384057d2b659b919cb973cf2a4351a6f4752a46dc9f13be568780f8ee9dbd7cdfd69c083f0"}}, 0xf2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x180000, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000001c0)={0x2, 0x4, "81ad53", 0x7f, 0xd}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, &(0x7f0000000340)={'\x00', 0x7, 0x1, 0x4}) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x10001, 0x1000]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x40000) tgkill(0xffffffffffffffff, 0x0, 0x37) pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x80000) getpid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000540)={0x3, 0x1, 0x0, 'queue0\x00', 0x3f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff) clock_gettime(0x2, &(0x7f0000000780)) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x2000, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@noextend}, {@cache_none}, {@cache_mmap}, {@loose}, {@nodevmap}, {@cachetag={'cachetag', 0x3d, ']:+.//'}}], [{@uid_lt={'uid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@dont_hash}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@seclabel}, {@obj_user={'obj_user', 0x3d, 'queue0\x00'}}, {@dont_appraise}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@seclabel}, {@euid_lt={'euid<', 0xee01}}]}}) 19:02:42 executing program 3: socketpair(0x27, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = socket(0x21, 0x6, 0x1f8) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/hidraw', 0x40002, 0x27) bind$802154_raw(r3, &(0x7f0000000200), 0x14) socketpair(0xb, 0x4, 0x2, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x4000000) accept(r2, &(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000400)=0x80) getpid() openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x98100, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r6, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ba}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20048080) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/sync_on_suspend', 0x1a1300, 0x80) ioctl$BINDER_CTL_ADD(r8, 0xc1086201, &(0x7f0000000700)={'binder0\x00'}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000880), r5) VM DIAGNOSIS: 19:02:37 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000167 RCX=ffffffff8129b8df RDX=fffffbfff0d9a6fe RSI=0000000000000008 RDI=ffffffff86cd37e8 RBP=0000000000000004 RSP=ffff8880187df818 R8 =0000000000000000 R9 =ffffffff86cd37ef R10=fffffbfff0d9a6fd R11=0000000000000001 R12=ffff888010090000 R13=0000000000000000 R14=ffff888010090978 R15=dffffc0000000000 RIP=ffffffff8129b8e7 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe367ec9900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe3672d9f80 CR3=000000000f1ca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 494e4f544f4e4f4d 5f454352554f535f YMM01=0000000000000000 0000000000000000 4d49545f43494e4f 544f4e4f4d5f4543 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 349c2a7cd08e4135 0000000000139dd8 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 6812f2dfc2dbd153 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000036 R11=0000000000000001 R12=0000000000000036 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe36731b220 CR3=00000000090a4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00000000ff000000 0000000000000000 YMM01=0000000000000000 0000000000000000 636f6c63006b6165 6c6d656d6b2f6775 YMM02=0000000000000000 0000000000000000 0000000000ffffff ff00000000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000