0000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000640)={0x5, 0x1}) r7 = syz_open_dev$vcsn(&(0x7f0000000680), 0x722, 0x400000) fsmount(r7, 0x0, 0x0) 18:49:54 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)) 18:49:54 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000640)={0x5, 0x1}) r7 = syz_open_dev$vcsn(&(0x7f0000000680), 0x722, 0x400000) fsmount(r7, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48811}, 0x80c1) fsmount(r6, 0x0, 0x0) 18:49:54 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000640)={0x5, 0x1}) syz_open_dev$vcsn(&(0x7f0000000680), 0x722, 0x400000) 18:49:54 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) 18:49:54 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) 18:49:54 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) fsmount(0xffffffffffffffff, 0x1, 0x2) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)) 18:49:54 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) 18:49:54 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000640)={0x5, 0x1}) r7 = syz_open_dev$vcsn(&(0x7f0000000680), 0x722, 0x400000) fsmount(r7, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48811}, 0x80c1) fsmount(r6, 0x0, 0x0) 18:49:55 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) 18:49:55 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 18:49:55 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 18:50:06 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 18:50:06 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) 18:50:06 executing program 3: socketpair(0x0, 0x3, 0x1, &(0x7f0000000300)) 18:50:06 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) fsmount(0xffffffffffffffff, 0x1, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)) 18:50:06 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000640)={0x5, 0x1}) syz_open_dev$vcsn(&(0x7f0000000680), 0x722, 0x400000) 18:50:06 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)) 18:50:06 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000640)={0x5, 0x1}) 18:50:06 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000640)={0x5, 0x1}) r7 = syz_open_dev$vcsn(&(0x7f0000000680), 0x722, 0x400000) fsmount(r7, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48811}, 0x80c1) 18:50:06 executing program 3: socketpair(0x0, 0x3, 0x1, &(0x7f0000000300)) 18:50:06 executing program 3: socketpair(0xa, 0x0, 0x1, &(0x7f0000000300)) 18:50:06 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)) 18:50:06 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 18:50:06 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000640)={0x5, 0x1}) r7 = syz_open_dev$vcsn(&(0x7f0000000680), 0x722, 0x400000) fsmount(r7, 0x0, 0x0) 18:50:06 executing program 3: socketpair(0xa, 0x0, 0x1, &(0x7f0000000300)) 18:50:06 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000640)={0x5, 0x1}) 18:50:06 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) fsmount(0xffffffffffffffff, 0x1, 0x2) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)) 18:50:06 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)) 18:50:06 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) 18:50:06 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 18:50:06 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)) 18:50:06 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 18:50:06 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) 18:50:06 executing program 5: fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:50:06 executing program 7: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)) 18:50:17 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) 18:50:17 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:50:17 executing program 7: socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)) 18:50:17 executing program 5: fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:50:17 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000640)={0x5, 0x1}) syz_open_dev$vcsn(&(0x7f0000000680), 0x722, 0x400000) 18:50:17 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) 18:50:17 executing program 0: socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)) 18:50:17 executing program 3: socketpair(0xa, 0x0, 0x1, &(0x7f0000000300)) 18:50:17 executing program 5: fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:50:17 executing program 0: socketpair(0x0, 0x3, 0x1, &(0x7f0000000300)) 18:50:32 executing program 0: socketpair(0x0, 0x3, 0x1, &(0x7f0000000300)) 18:50:32 executing program 7: socketpair(0x0, 0x3, 0x1, &(0x7f0000000300)) 18:50:32 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) 18:50:32 executing program 3: socketpair(0xa, 0x3, 0x0, &(0x7f0000000300)) 18:50:32 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) fsmount(0xffffffffffffffff, 0x1, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:50:32 executing program 5: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 18:50:32 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) 18:50:32 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000640)={0x5, 0x1}) 18:50:32 executing program 0: socketpair(0x0, 0x3, 0x1, &(0x7f0000000300)) 18:50:32 executing program 5: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 18:50:32 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) fsmount(0xffffffffffffffff, 0x1, 0x2) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:50:43 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:50:43 executing program 5: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 18:50:43 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) 18:50:43 executing program 7: socketpair(0x0, 0x3, 0x1, &(0x7f0000000300)) 18:50:43 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) 18:50:43 executing program 3: socketpair(0xa, 0x3, 0x0, &(0x7f0000000300)) 18:50:43 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) 18:50:43 executing program 0: socketpair(0xa, 0x0, 0x1, &(0x7f0000000300)) 18:50:43 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:50:43 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) 18:50:43 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) 18:50:43 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) 18:50:43 executing program 7: socketpair(0x0, 0x3, 0x1, &(0x7f0000000300)) 18:50:43 executing program 0: socketpair(0xa, 0x0, 0x1, &(0x7f0000000300)) 18:50:44 executing program 6: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:50:44 executing program 3: socketpair(0xa, 0x3, 0x0, &(0x7f0000000300)) 18:50:44 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:50:44 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) 18:50:44 executing program 7: socketpair(0xa, 0x0, 0x1, &(0x7f0000000300)) 18:50:44 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) 18:50:44 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:50:44 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) 18:50:44 executing program 6: fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:50:56 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) 18:50:56 executing program 0: socketpair(0xa, 0x0, 0x1, &(0x7f0000000300)) 18:50:56 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)) 18:50:56 executing program 6: fsopen(0x0, 0x1) 18:50:56 executing program 5: socketpair(0xa, 0x3, 0x0, &(0x7f0000000300)) 18:50:56 executing program 3: socketpair(0xa, 0x3, 0x1, 0x0) 18:50:56 executing program 7: socketpair(0xa, 0x0, 0x1, &(0x7f0000000300)) 18:50:56 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)) 18:50:56 executing program 6: fsopen(0x0, 0x1) 18:50:56 executing program 3: socketpair(0xa, 0x3, 0x1, 0x0) 18:50:56 executing program 0: socketpair(0xa, 0x3, 0x0, &(0x7f0000000300)) 18:50:56 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:50:56 executing program 5: socketpair(0xa, 0x3, 0x0, &(0x7f0000000300)) 18:50:56 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:51:10 executing program 5: socketpair(0xa, 0x3, 0x0, &(0x7f0000000300)) 18:51:10 executing program 7: socketpair(0xa, 0x0, 0x1, &(0x7f0000000300)) 18:51:10 executing program 0: socketpair(0xa, 0x3, 0x0, &(0x7f0000000300)) 18:51:10 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) 18:51:10 executing program 6: fsopen(0x0, 0x1) 18:51:10 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) 18:51:10 executing program 3: socketpair(0xa, 0x3, 0x1, 0x0) 18:51:10 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) fsmount(0xffffffffffffffff, 0x1, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:51:10 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) fsmount(0xffffffffffffffff, 0x1, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 18:51:10 executing program 3: fsopen(0x0, 0x1) 18:51:10 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) fsmount(0xffffffffffffffff, 0x1, 0x2) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:51:10 executing program 6: fsopen(&(0x7f00000002c0)='befs\x00', 0x0) 18:51:22 executing program 6: socketpair(0xa, 0x3, 0x0, &(0x7f0000000300)) 18:51:22 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:51:22 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) 18:51:22 executing program 3: fsopen(0x0, 0x1) 18:51:22 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) fsmount(0xffffffffffffffff, 0x1, 0x2) 18:51:22 executing program 7: socketpair(0xa, 0x3, 0x0, &(0x7f0000000300)) 18:51:22 executing program 5: socketpair(0x0, 0x3, 0x0, &(0x7f0000000300)) 18:51:22 executing program 0: socketpair(0xa, 0x3, 0x0, &(0x7f0000000300)) 18:51:22 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x1, 0x2) 18:51:22 executing program 6: socketpair(0xa, 0x3, 0x0, &(0x7f0000000300)) 18:51:22 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:51:22 executing program 3: fsopen(0x0, 0x1) 18:51:22 executing program 5: socketpair(0x0, 0x3, 0x0, &(0x7f0000000300)) 18:51:22 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) 18:51:22 executing program 1: fsmount(0xffffffffffffffff, 0x1, 0x2) 18:51:22 executing program 0: socketpair(0xa, 0x3, 0x1, 0x0) 18:51:22 executing program 7: socketpair(0xa, 0x3, 0x0, &(0x7f0000000300)) 18:51:22 executing program 2: fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:51:22 executing program 3: fsopen(0x0, 0x0) 18:51:22 executing program 6: socketpair(0xa, 0x3, 0x0, &(0x7f0000000300)) 18:51:33 executing program 6: socketpair(0x0, 0x3, 0x0, &(0x7f0000000300)) 18:51:33 executing program 3: socketpair(0xa, 0x0, 0x1, &(0x7f0000000300)) 18:51:33 executing program 0: socketpair(0xa, 0x3, 0x1, 0x0) 18:51:33 executing program 2: fsopen(0x0, 0x1) 18:51:33 executing program 1: fsmount(0xffffffffffffffff, 0x0, 0x2) 18:51:33 executing program 7: socketpair(0xa, 0x3, 0x0, &(0x7f0000000300)) 18:51:33 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)) 18:51:33 executing program 5: socketpair(0x0, 0x3, 0x0, &(0x7f0000000300)) 18:51:34 executing program 1: fsmount(0xffffffffffffffff, 0x0, 0x0) 18:51:34 executing program 0: socketpair(0xa, 0x3, 0x1, 0x0) 18:51:34 executing program 2: fsopen(0x0, 0x1) 18:51:34 executing program 5: socketpair(0xa, 0x0, 0x0, &(0x7f0000000300)) 18:51:34 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:51:46 executing program 1: fsmount(0xffffffffffffffff, 0x0, 0x0) 18:51:46 executing program 5: socketpair(0xa, 0x0, 0x0, &(0x7f0000000300)) 18:51:46 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:51:46 executing program 6: socketpair(0x0, 0x3, 0x0, &(0x7f0000000300)) 18:51:46 executing program 0: socketpair(0x0, 0x3, 0x0, &(0x7f0000000300)) 18:51:46 executing program 2: fsopen(0x0, 0x1) 18:51:46 executing program 7: socketpair(0xa, 0x3, 0x1, 0x0) 18:51:46 executing program 3: socketpair(0xa, 0x0, 0x1, &(0x7f0000000300)) 18:51:46 executing program 7: socketpair(0xa, 0x3, 0x1, 0x0) 18:51:46 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) fsmount(0xffffffffffffffff, 0x1, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:51:46 executing program 1: fsmount(0xffffffffffffffff, 0x0, 0x0) 18:51:46 executing program 2: fsopen(&(0x7f00000002c0)='befs\x00', 0x0) 18:51:46 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000640)={0x5, 0x1}) r7 = syz_open_dev$vcsn(&(0x7f0000000680), 0x722, 0x400000) fsmount(r7, 0x0, 0x0) 18:51:46 executing program 7: socketpair(0xa, 0x3, 0x1, 0x0) 18:51:46 executing program 3: socketpair(0xa, 0x0, 0x1, &(0x7f0000000300)) 18:51:46 executing program 6: socketpair(0x0, 0x3, 0x0, &(0x7f0000000300)) 18:51:46 executing program 7: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000640)={0x5, 0x1}) r7 = syz_open_dev$vcsn(&(0x7f0000000680), 0x722, 0x400000) fsmount(r7, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48811}, 0x80c1) fsmount(r6, 0x0, 0x0) 18:51:46 executing program 5: socketpair(0xa, 0x0, 0x0, &(0x7f0000000300)) 18:51:46 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000640)={0x5, 0x1}) r7 = syz_open_dev$vcsn(&(0x7f0000000680), 0x722, 0x400000) fsmount(r7, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48811}, 0x80c1) r8 = fsmount(r6, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f00000007c0)='-^-^-/.-[\x00', &(0x7f0000000800)='./file0\x00', r8) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040b0}, 0x4010) 18:51:46 executing program 3: socketpair(0x0, 0x0, 0x1, &(0x7f0000000300)) 18:51:59 executing program 5: socketpair(0xa, 0x3, 0x0, 0x0) 18:51:59 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000a00), 0x4, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x3c}}, 0x40000) 18:51:59 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000640)={0x5, 0x1}) r7 = syz_open_dev$vcsn(&(0x7f0000000680), 0x722, 0x400000) fsmount(r7, 0x0, 0x0) 18:51:59 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) fsmount(0xffffffffffffffff, 0x1, 0x2) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:51:59 executing program 6: socketpair(0xa, 0x0, 0x0, &(0x7f0000000300)) 18:51:59 executing program 3: socketpair(0x0, 0x0, 0x1, &(0x7f0000000300)) 18:51:59 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000a00), 0x4, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x3c}}, 0x40000) 18:51:59 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000a00), 0x4, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x3c}}, 0x40000) 18:51:59 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000a00), 0x4, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x3c}}, 0x40000) 18:51:59 executing program 5: socketpair(0xa, 0x3, 0x0, 0x0) 18:51:59 executing program 3: socketpair(0x0, 0x0, 0x1, &(0x7f0000000300)) 18:51:59 executing program 6: socketpair(0xa, 0x0, 0x0, &(0x7f0000000300)) 18:51:59 executing program 3: socketpair(0xa, 0x0, 0x0, &(0x7f0000000300)) 18:51:59 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:51:59 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000a00), 0x4, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x3c}}, 0x40000) 18:51:59 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7a3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x440e6284}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) socketpair(0xa, 0x3, 0x1, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r1) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4404}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xc, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x100}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4800) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2000, 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000005c0)='async\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000600)='silent\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000000640)={0x5, 0x1}) r7 = syz_open_dev$vcsn(&(0x7f0000000680), 0x722, 0x400000) fsmount(r7, 0x0, 0x0) 18:52:12 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000a00), 0x4, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x3c}}, 0x40000) 18:52:12 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000a00), 0x4, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x3c}}, 0x40000) 18:52:12 executing program 0: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000a00), 0x4, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x3c}}, 0x40000) 18:52:12 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000a00), 0x4, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x3c}}, 0x40000) 18:52:12 executing program 5: socketpair(0xa, 0x3, 0x0, 0x0) 18:52:12 executing program 6: socketpair(0xa, 0x0, 0x0, &(0x7f0000000300)) 18:52:12 executing program 3: socketpair(0xa, 0x0, 0x0, 0x0) 18:52:12 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:52:13 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000a00), 0x4, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r5) 18:52:13 executing program 3: socketpair(0xa, 0x0, 0x0, 0x0) 18:52:13 executing program 0: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000a00), 0x4, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x3c}}, 0x40000) 18:52:13 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @dev}, &(0x7f00000000c0)=0xc) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8082}, 0x0) r4 = accept4(0xffffffffffffffff, &(0x7f0000000340)=@x25={0x9, @remote}, &(0x7f00000003c0)=0x80, 0x400) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000400)={0x9, "df2c77"}, 0x6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x2000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x20008000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r6, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4040000) socketpair(0x26, 0x1, 0x6, &(0x7f0000000940)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x74, r9, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xffffff0e, 0x72}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="5421d6c3ad27"}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd140}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x100, {0x8, 0x97ee, 0x6, 0xff}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 18:52:24 executing program 4: fsopen(&(0x7f00000002c0)='befs\x00', 0x1) 18:52:24 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000a00), 0x4, 0x0) 18:52:24 executing program 3: socketpair(0xa, 0x0, 0x0, 0x0) 18:52:24 executing program 0: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000a00), 0x4, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x3c}}, 0x40000) 18:52:24 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000a00), 0x4, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r5) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r7, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x3c}}, 0x40000) 18:52:24 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000a00), 0x4, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r5) 18:52:24 executing program 6: socketpair(0xa, 0x3, 0x0, 0x0) 18:52:24 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r5 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x604, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 18:52:24 executing program 6: socketpair(0xa, 0x3, 0x0, 0x0) 18:52:24 executing program 4: fsopen(0x0, 0x1) 18:52:24 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r5 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x604, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 18:52:24 executing program 6: socketpair(0xa, 0x3, 0x0, 0x0) 18:52:24 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r5 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x604, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 18:52:24 executing program 4: fsopen(0x0, 0x1) 18:52:24 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000a00), 0x4, 0x0) 18:52:24 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:52:24 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r5 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x604, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 18:52:24 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r5 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x604, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 18:52:24 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000a00), 0x4, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r5) 18:52:24 executing program 4: fsopen(0x0, 0x1) 18:52:37 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:52:37 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r5 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x604, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 18:52:37 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) r6 = getpgid(0x0) wait4(r6, &(0x7f0000000a00), 0x4, 0x0) 18:52:37 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) 18:52:37 executing program 4: fsopen(&(0x7f00000002c0)='befs\x00', 0x0) 18:52:37 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r5 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x604, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 18:52:37 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) getpgid(0x0) 18:52:37 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r5 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x604, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 18:52:37 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) 18:52:37 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x80}, {0x4b, 0x3}], "5d19b74e110e2a4f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x7}, {0xa5, 0x1}, {0x8e, 0x1}, {0x2, 0x1}, {0x8}, {0x8}, {0x7, 0x4}, {0x6, 0x7}, {0xe3, 0x1}, {0x1, 0x5}, {0x16, 0x3}], "653e76188a7d57ce"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0b05b3c842043735"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6}, {0x5, 0x1}, {0x81}, {0x5, 0x7}, {0xa7, 0x1}, {0x0, 0x4}, {0x6d, 0x5}, {0x28, 0x5}, {}, {0x1, 0x2}, {0xae, 0x5}, {0x40, 0x2}, {0x1f, 0x5}, {0x5, 0x7}, {0xff, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x40, 0x1}, {0xdb, 0x7}], "49b8292d9d36a76f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ddb3259bdd61947c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1f, 0x1}, {0x81, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0xfa, 0x6}, {0x8, 0x7}, {0x20, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x40, 0x5}, {0x4, 0x3}, {0x81, 0x6}, {0x7f, 0x2}, {0x20, 0x7}, {0x81, 0x2}, {0x69, 0x4}, {0x7f}, {0x20, 0x3}, {0x20}, {0x0, 0x2}, {0x8, 0x3}], "facbdfa38100f71a"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x4b, 0x6}, {0x4}, {0x20, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0x3}, {0x4, 0x1}, {0x20, 0x7}], "0e8d196468d9a792"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "315de1c7e28e475f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000000) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000500)) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r3) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r8, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa0, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x40800) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r7) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 18:52:37 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) 18:52:37 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r5 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x604, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 18:52:37 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getpgid(0x0) 18:52:37 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) getpgid(0x0) 18:52:37 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:52:37 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r5 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x604, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 18:52:50 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) getpgid(0x0) 18:52:50 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x80}, {0x4b, 0x3}], "5d19b74e110e2a4f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x7}, {0xa5, 0x1}, {0x8e, 0x1}, {0x2, 0x1}, {0x8}, {0x8}, {0x7, 0x4}, {0x6, 0x7}, {0xe3, 0x1}, {0x1, 0x5}, {0x16, 0x3}], "653e76188a7d57ce"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0b05b3c842043735"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6}, {0x5, 0x1}, {0x81}, {0x5, 0x7}, {0xa7, 0x1}, {0x0, 0x4}, {0x6d, 0x5}, {0x28, 0x5}, {}, {0x1, 0x2}, {0xae, 0x5}, {0x40, 0x2}, {0x1f, 0x5}, {0x5, 0x7}, {0xff, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x40, 0x1}, {0xdb, 0x7}], "49b8292d9d36a76f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ddb3259bdd61947c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1f, 0x1}, {0x81, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0xfa, 0x6}, {0x8, 0x7}, {0x20, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x40, 0x5}, {0x4, 0x3}, {0x81, 0x6}, {0x7f, 0x2}, {0x20, 0x7}, {0x81, 0x2}, {0x69, 0x4}, {0x7f}, {0x20, 0x3}, {0x20}, {0x0, 0x2}, {0x8, 0x3}], "facbdfa38100f71a"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x4b, 0x6}, {0x4}, {0x20, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0x3}, {0x4, 0x1}, {0x20, 0x7}], "0e8d196468d9a792"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "315de1c7e28e475f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000000) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000500)) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r3) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r8, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa0, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x40800) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r7) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 18:52:50 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:52:50 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r5 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x604, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 18:52:50 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) 18:52:50 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r5 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x604, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 18:52:50 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc76}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) 18:52:50 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) 18:52:50 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) accept4(0xffffffffffffffff, 0x0, &(0x7f00000007c0), 0x800) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) 18:52:50 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:52:51 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) 18:53:04 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) 18:53:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) 18:53:04 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) 18:53:04 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) getpgid(0x0) 18:53:04 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) 18:53:04 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x80}, {0x4b, 0x3}], "5d19b74e110e2a4f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x7}, {0xa5, 0x1}, {0x8e, 0x1}, {0x2, 0x1}, {0x8}, {0x8}, {0x7, 0x4}, {0x6, 0x7}, {0xe3, 0x1}, {0x1, 0x5}, {0x16, 0x3}], "653e76188a7d57ce"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0b05b3c842043735"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6}, {0x5, 0x1}, {0x81}, {0x5, 0x7}, {0xa7, 0x1}, {0x0, 0x4}, {0x6d, 0x5}, {0x28, 0x5}, {}, {0x1, 0x2}, {0xae, 0x5}, {0x40, 0x2}, {0x1f, 0x5}, {0x5, 0x7}, {0xff, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x40, 0x1}, {0xdb, 0x7}], "49b8292d9d36a76f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ddb3259bdd61947c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1f, 0x1}, {0x81, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0xfa, 0x6}, {0x8, 0x7}, {0x20, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x40, 0x5}, {0x4, 0x3}, {0x81, 0x6}, {0x7f, 0x2}, {0x20, 0x7}, {0x81, 0x2}, {0x69, 0x4}, {0x7f}, {0x20, 0x3}, {0x20}, {0x0, 0x2}, {0x8, 0x3}], "facbdfa38100f71a"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x4b, 0x6}, {0x4}, {0x20, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0x3}, {0x4, 0x1}, {0x20, 0x7}], "0e8d196468d9a792"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "315de1c7e28e475f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000000) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000500)) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r3) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r8, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa0, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x40800) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r7) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 18:53:04 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:53:04 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r5 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x604, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 18:53:04 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) 18:53:04 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:53:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) 18:53:04 executing program 4: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x80}, {0x4b, 0x3}], "5d19b74e110e2a4f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x7}, {0xa5, 0x1}, {0x8e, 0x1}, {0x2, 0x1}, {0x8}, {0x8}, {0x7, 0x4}, {0x6, 0x7}, {0xe3, 0x1}, {0x1, 0x5}, {0x16, 0x3}], "653e76188a7d57ce"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0b05b3c842043735"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6}, {0x5, 0x1}, {0x81}, {0x5, 0x7}, {0xa7, 0x1}, {0x0, 0x4}, {0x6d, 0x5}, {0x28, 0x5}, {}, {0x1, 0x2}, {0xae, 0x5}, {0x40, 0x2}, {0x1f, 0x5}, {0x5, 0x7}, {0xff, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x40, 0x1}, {0xdb, 0x7}], "49b8292d9d36a76f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ddb3259bdd61947c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1f, 0x1}, {0x81, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0xfa, 0x6}, {0x8, 0x7}, {0x20, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x40, 0x5}, {0x4, 0x3}, {0x81, 0x6}, {0x7f, 0x2}, {0x20, 0x7}, {0x81, 0x2}, {0x69, 0x4}, {0x7f}, {0x20, 0x3}, {0x20}, {0x0, 0x2}, {0x8, 0x3}], "facbdfa38100f71a"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x4b, 0x6}, {0x4}, {0x20, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0x3}, {0x4, 0x1}, {0x20, 0x7}], "0e8d196468d9a792"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "315de1c7e28e475f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000000) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000500)) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r3) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r8, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa0, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x40800) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r7) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 18:53:04 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) 18:53:04 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) 18:53:04 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) getpgid(0x0) 18:53:04 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x42}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) 18:53:04 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:53:04 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r7, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) 18:53:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) 18:53:21 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) 18:53:21 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) 18:53:21 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) 18:53:21 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) 18:53:21 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) 18:53:21 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) 18:53:21 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:53:21 executing program 4: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:53:21 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) 18:53:21 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:53:21 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) 18:53:21 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x501142, 0x0) 18:53:21 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) 18:53:21 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) 18:53:21 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r0, 0x8ba3f78fbc12c662, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10c}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20}, 0x48810) getpgid(0x0) 18:53:21 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) 18:53:21 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) 18:53:21 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040) 18:53:34 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) 18:53:34 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000400)={'wpan3\x00'}) getpgid(0x0) 18:53:34 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:53:34 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) 18:53:34 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) 18:53:34 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) 18:53:34 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) 18:53:34 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) 18:53:34 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) 18:53:34 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) 18:53:47 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000640)={0x7f, 0xf9}, 0x2) 18:53:47 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) 18:53:47 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x2c}}, 0x24040000) getpgid(0x0) 18:53:47 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) 18:53:47 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:53:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) 18:53:47 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) 18:53:47 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) 18:53:47 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) 18:53:47 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fsmount(r1, 0x0, 0x38) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) 18:53:47 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:53:47 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) getpgid(0x0) 18:53:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) 18:53:47 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) 18:53:47 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) 18:53:47 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) 18:53:47 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) 18:53:47 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:53:47 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) 18:53:47 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) 18:53:47 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) getpgid(0x0) 18:53:47 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:53:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) 18:53:47 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) 18:54:00 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) getpgid(0x0) 18:54:00 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) 18:54:00 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) 18:54:00 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) 18:54:00 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:54:00 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) 18:54:00 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) 18:54:00 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) 18:54:00 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) getpgid(0x0) 18:54:00 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) getpgid(0x0) 18:54:00 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) 18:54:15 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) 18:54:15 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) 18:54:15 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) 18:54:15 executing program 1: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) getpgid(0x0) 18:54:15 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) getrusage(0xfffffffffffffffe, &(0x7f0000000940)) 18:54:15 executing program 7: wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:54:15 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) 18:54:15 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) 18:54:15 executing program 7: wait4(0x0, 0x0, 0x4, 0x0) 18:54:15 executing program 2: getrusage(0xfffffffffffffffe, &(0x7f0000000940)) 18:54:15 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) 18:54:15 executing program 1: getpgid(0x0) 18:54:15 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fsmount(r1, 0x0, 0x38) 18:54:15 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) 18:54:15 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) 18:54:15 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) 18:54:15 executing program 7: wait4(0x0, 0x0, 0x0, 0x0) 18:54:15 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) 18:54:15 executing program 2: getrusage(0x0, &(0x7f0000000940)) 18:54:28 executing program 1: getrusage(0x0, &(0x7f0000000940)) 18:54:28 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) 18:54:28 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) 18:54:28 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) fsmount(r1, 0x0, 0x38) 18:54:28 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) 18:54:28 executing program 7: wait4(0x0, 0x0, 0x0, 0x0) 18:54:28 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fsmount(r1, 0x0, 0x38) 18:54:28 executing program 2: getrusage(0x0, &(0x7f0000000940)) 18:54:28 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) fsmount(r1, 0x0, 0x38) 18:54:28 executing program 7: wait4(0x0, 0x0, 0x0, 0x0) 18:54:28 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) 18:54:41 executing program 2: getrusage(0x0, &(0x7f0000000940)) 18:54:41 executing program 7: wait4(0x0, 0x0, 0x0, 0x0) 18:54:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) 18:54:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) fsmount(0xffffffffffffffff, 0x0, 0x38) 18:54:41 executing program 5: accept4(0xffffffffffffffff, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) 18:54:41 executing program 1: getrusage(0x0, &(0x7f0000000940)) 18:54:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fsmount(r1, 0x0, 0x38) 18:54:41 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 18:54:41 executing program 5: accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x800) 18:54:41 executing program 5: accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 18:54:41 executing program 2: getrusage(0xfffffffffffffffe, 0x0) 18:54:41 executing program 5: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:54:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fsmount(r1, 0x0, 0x38) 18:54:41 executing program 5: getrusage(0x0, &(0x7f0000000940)) 18:54:41 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) fsmount(0xffffffffffffffff, 0x0, 0x38) 18:54:41 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 18:54:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 18:54:41 executing program 7: wait4(0x0, 0x0, 0x0, 0x0) 18:54:41 executing program 1: getrusage(0x0, &(0x7f0000000940)) 18:54:41 executing program 5: getrusage(0x0, &(0x7f0000000940)) 18:54:41 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) 18:54:41 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 18:54:42 executing program 5: getrusage(0x0, &(0x7f0000000940)) 18:54:42 executing program 1: getrusage(0x0, 0x0) 18:54:42 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) 18:54:42 executing program 7: wait4(0x0, 0x0, 0x0, 0x0) 18:54:56 executing program 5: getrusage(0x0, 0x0) 18:54:56 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 18:54:56 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 18:54:56 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) 18:54:56 executing program 1: getrusage(0x0, 0x0) 18:54:56 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) 18:54:56 executing program 3: syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsmount(0xffffffffffffffff, 0x0, 0x38) 18:54:56 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) 18:54:56 executing program 1: getrusage(0x0, 0x0) 18:54:56 executing program 2: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51db3290}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc014}, 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) wait4(0x0, &(0x7f0000000a00), 0x4, 0x0) 18:54:56 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0xd18, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = fsmount(r1, 0x0, 0x38) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x3, 0x8000) r4 = accept4(r0, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80, 0x800) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8bd}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x44010}, 0x20040840) accept(r1, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) 18:54:56 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x38) 18:54:56 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) 18:54:56 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) 18:54:56 executing program 5: getrusage(0x0, 0x0) 18:54:57 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x80}, {0x4b, 0x3}], "5d19b74e110e2a4f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x7}, {0xa5, 0x1}, {0x8e, 0x1}, {0x2, 0x1}, {0x8}, {0x8}, {0x7, 0x4}, {0x6, 0x7}, {0xe3, 0x1}, {0x1, 0x5}, {0x16, 0x3}], "653e76188a7d57ce"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0b05b3c842043735"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6}, {0x5, 0x1}, {0x81}, {0x5, 0x7}, {0xa7, 0x1}, {0x0, 0x4}, {0x6d, 0x5}, {0x28, 0x5}, {}, {0x1, 0x2}, {0xae, 0x5}, {0x40, 0x2}, {0x1f, 0x5}, {0x5, 0x7}, {0xff, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x40, 0x1}, {0xdb, 0x7}], "49b8292d9d36a76f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ddb3259bdd61947c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1f, 0x1}, {0x81, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0xfa, 0x6}, {0x8, 0x7}, {0x20, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x40, 0x5}, {0x4, 0x3}, {0x81, 0x6}, {0x7f, 0x2}, {0x20, 0x7}, {0x81, 0x2}, {0x69, 0x4}, {0x7f}, {0x20, 0x3}, {0x20}, {0x0, 0x2}, {0x8, 0x3}], "facbdfa38100f71a"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x4b, 0x6}, {0x4}, {0x20, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0x3}, {0x4, 0x1}, {0x20, 0x7}], "0e8d196468d9a792"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "315de1c7e28e475f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000000) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000500)) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r3) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r8, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa0, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x40800) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r7) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 18:55:11 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x80}, {0x4b, 0x3}], "5d19b74e110e2a4f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x7}, {0xa5, 0x1}, {0x8e, 0x1}, {0x2, 0x1}, {0x8}, {0x8}, {0x7, 0x4}, {0x6, 0x7}, {0xe3, 0x1}, {0x1, 0x5}, {0x16, 0x3}], "653e76188a7d57ce"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0b05b3c842043735"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6}, {0x5, 0x1}, {0x81}, {0x5, 0x7}, {0xa7, 0x1}, {0x0, 0x4}, {0x6d, 0x5}, {0x28, 0x5}, {}, {0x1, 0x2}, {0xae, 0x5}, {0x40, 0x2}, {0x1f, 0x5}, {0x5, 0x7}, {0xff, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x40, 0x1}, {0xdb, 0x7}], "49b8292d9d36a76f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ddb3259bdd61947c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1f, 0x1}, {0x81, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0xfa, 0x6}, {0x8, 0x7}, {0x20, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x40, 0x5}, {0x4, 0x3}, {0x81, 0x6}, {0x7f, 0x2}, {0x20, 0x7}, {0x81, 0x2}, {0x69, 0x4}, {0x7f}, {0x20, 0x3}, {0x20}, {0x0, 0x2}, {0x8, 0x3}], "facbdfa38100f71a"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x4b, 0x6}, {0x4}, {0x20, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0x3}, {0x4, 0x1}, {0x20, 0x7}], "0e8d196468d9a792"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "315de1c7e28e475f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000000) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000500)) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r3) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r8, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa0, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x40800) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r7) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 18:55:11 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 18:55:11 executing program 6: syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) 18:55:11 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) 18:55:11 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) 18:55:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001008}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r4, 0x510, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x28, 0x1, 0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x400, 0x7f, 0x0]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40885}, 0x20048004) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x71, 0x5}, {0x0, 0x6}], "d9b40c4fca0d53ca"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x1, 0x4}, {0x5, 0x1}, {0x8c, 0x7}, {0xd, 0x4}, {0x1f, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x9, 0x7}, {0x8, 0x5}, {0x0, 0x6}, {0x40, 0x6}, {0x20, 0x1}, {0x7, 0x3}], "baa149cbaef37462"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x20, 0x7}, {0x3}], "085e9096866caea7"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 18:55:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001008}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r4, 0x510, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x28, 0x1, 0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x400, 0x7f, 0x0]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40885}, 0x20048004) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x71, 0x5}, {0x0, 0x6}], "d9b40c4fca0d53ca"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x1, 0x4}, {0x5, 0x1}, {0x8c, 0x7}, {0xd, 0x4}, {0x1f, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x9, 0x7}, {0x8, 0x5}, {0x0, 0x6}, {0x40, 0x6}, {0x20, 0x1}, {0x7, 0x3}], "baa149cbaef37462"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x20, 0x7}, {0x3}], "085e9096866caea7"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 18:55:11 executing program 5: getrusage(0x0, 0x0) 18:55:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001008}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r4, 0x510, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x28, 0x1, 0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x400, 0x7f, 0x0]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40885}, 0x20048004) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x71, 0x5}, {0x0, 0x6}], "d9b40c4fca0d53ca"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x1, 0x4}, {0x5, 0x1}, {0x8c, 0x7}, {0xd, 0x4}, {0x1f, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x9, 0x7}, {0x8, 0x5}, {0x0, 0x6}, {0x40, 0x6}, {0x20, 0x1}, {0x7, 0x3}], "baa149cbaef37462"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x20, 0x7}, {0x3}], "085e9096866caea7"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 18:55:21 executing program 6: syz_open_dev$vcsn(0x0, 0x8, 0x2a0001) 18:55:21 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) 18:55:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001008}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r4, 0x510, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x28, 0x1, 0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x400, 0x7f, 0x0]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40885}, 0x20048004) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x71, 0x5}, {0x0, 0x6}], "d9b40c4fca0d53ca"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x1, 0x4}, {0x5, 0x1}, {0x8c, 0x7}, {0xd, 0x4}, {0x1f, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x9, 0x7}, {0x8, 0x5}, {0x0, 0x6}, {0x40, 0x6}, {0x20, 0x1}, {0x7, 0x3}], "baa149cbaef37462"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x20, 0x7}, {0x3}], "085e9096866caea7"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 18:55:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001008}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r4, 0x510, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x28, 0x1, 0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x400, 0x7f, 0x0]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40885}, 0x20048004) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x71, 0x5}, {0x0, 0x6}], "d9b40c4fca0d53ca"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x1, 0x4}, {0x5, 0x1}, {0x8c, 0x7}, {0xd, 0x4}, {0x1f, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x9, 0x7}, {0x8, 0x5}, {0x0, 0x6}, {0x40, 0x6}, {0x20, 0x1}, {0x7, 0x3}], "baa149cbaef37462"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x20, 0x7}, {0x3}], "085e9096866caea7"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 18:55:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001008}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r4, 0x510, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x28, 0x1, 0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x400, 0x7f, 0x0]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40885}, 0x20048004) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x71, 0x5}, {0x0, 0x6}], "d9b40c4fca0d53ca"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x1, 0x4}, {0x5, 0x1}, {0x8c, 0x7}, {0xd, 0x4}, {0x1f, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x9, 0x7}, {0x8, 0x5}, {0x0, 0x6}, {0x40, 0x6}, {0x20, 0x1}, {0x7, 0x3}], "baa149cbaef37462"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x20, 0x7}, {0x3}], "085e9096866caea7"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 18:55:21 executing program 0: getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) 18:55:21 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) 18:55:22 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x80}, {0x4b, 0x3}], "5d19b74e110e2a4f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x7}, {0xa5, 0x1}, {0x8e, 0x1}, {0x2, 0x1}, {0x8}, {0x8}, {0x7, 0x4}, {0x6, 0x7}, {0xe3, 0x1}, {0x1, 0x5}, {0x16, 0x3}], "653e76188a7d57ce"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0b05b3c842043735"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6}, {0x5, 0x1}, {0x81}, {0x5, 0x7}, {0xa7, 0x1}, {0x0, 0x4}, {0x6d, 0x5}, {0x28, 0x5}, {}, {0x1, 0x2}, {0xae, 0x5}, {0x40, 0x2}, {0x1f, 0x5}, {0x5, 0x7}, {0xff, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x40, 0x1}, {0xdb, 0x7}], "49b8292d9d36a76f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ddb3259bdd61947c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1f, 0x1}, {0x81, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0xfa, 0x6}, {0x8, 0x7}, {0x20, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x40, 0x5}, {0x4, 0x3}, {0x81, 0x6}, {0x7f, 0x2}, {0x20, 0x7}, {0x81, 0x2}, {0x69, 0x4}, {0x7f}, {0x20, 0x3}, {0x20}, {0x0, 0x2}, {0x8, 0x3}], "facbdfa38100f71a"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x4b, 0x6}, {0x4}, {0x20, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0x3}, {0x4, 0x1}, {0x20, 0x7}], "0e8d196468d9a792"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "315de1c7e28e475f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000000) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000500)) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r3) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r8, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa0, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x40800) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r7) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 18:55:22 executing program 0: getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000140)) 18:55:22 executing program 6: syz_open_dev$vcsn(0x0, 0x8, 0x2a0001) 18:55:22 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x80}, {0x4b, 0x3}], "5d19b74e110e2a4f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x7}, {0xa5, 0x1}, {0x8e, 0x1}, {0x2, 0x1}, {0x8}, {0x8}, {0x7, 0x4}, {0x6, 0x7}, {0xe3, 0x1}, {0x1, 0x5}, {0x16, 0x3}], "653e76188a7d57ce"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0b05b3c842043735"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6}, {0x5, 0x1}, {0x81}, {0x5, 0x7}, {0xa7, 0x1}, {0x0, 0x4}, {0x6d, 0x5}, {0x28, 0x5}, {}, {0x1, 0x2}, {0xae, 0x5}, {0x40, 0x2}, {0x1f, 0x5}, {0x5, 0x7}, {0xff, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x40, 0x1}, {0xdb, 0x7}], "49b8292d9d36a76f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ddb3259bdd61947c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1f, 0x1}, {0x81, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0xfa, 0x6}, {0x8, 0x7}, {0x20, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x40, 0x5}, {0x4, 0x3}, {0x81, 0x6}, {0x7f, 0x2}, {0x20, 0x7}, {0x81, 0x2}, {0x69, 0x4}, {0x7f}, {0x20, 0x3}, {0x20}, {0x0, 0x2}, {0x8, 0x3}], "facbdfa38100f71a"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x4b, 0x6}, {0x4}, {0x20, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0x3}, {0x4, 0x1}, {0x20, 0x7}], "0e8d196468d9a792"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "315de1c7e28e475f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000000) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000500)) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r3) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r8, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa0, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x40800) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r7) 18:55:22 executing program 0: getsockname(0xffffffffffffffff, 0x0, 0x0) 18:55:22 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) getsockname(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000140)=0x80) 18:55:22 executing program 3: fsmount(0xffffffffffffffff, 0x0, 0x0) 18:55:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001008}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r4, 0x510, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x28, 0x1, 0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x400, 0x7f, 0x0]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40885}, 0x20048004) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x71, 0x5}, {0x0, 0x6}], "d9b40c4fca0d53ca"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x1, 0x4}, {0x5, 0x1}, {0x8c, 0x7}, {0xd, 0x4}, {0x1f, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x9, 0x7}, {0x8, 0x5}, {0x0, 0x6}, {0x40, 0x6}, {0x20, 0x1}, {0x7, 0x3}], "baa149cbaef37462"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x20, 0x7}, {0x3}], "085e9096866caea7"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 18:55:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001008}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r4, 0x510, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x28, 0x1, 0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x400, 0x7f, 0x0]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40885}, 0x20048004) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x71, 0x5}, {0x0, 0x6}], "d9b40c4fca0d53ca"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x1, 0x4}, {0x5, 0x1}, {0x8c, 0x7}, {0xd, 0x4}, {0x1f, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x9, 0x7}, {0x8, 0x5}, {0x0, 0x6}, {0x40, 0x6}, {0x20, 0x1}, {0x7, 0x3}], "baa149cbaef37462"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x20, 0x7}, {0x3}], "085e9096866caea7"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 18:55:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001008}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r4, 0x510, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x28, 0x1, 0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x400, 0x7f, 0x0]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40885}, 0x20048004) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x71, 0x5}, {0x0, 0x6}], "d9b40c4fca0d53ca"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x1, 0x4}, {0x5, 0x1}, {0x8c, 0x7}, {0xd, 0x4}, {0x1f, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x9, 0x7}, {0x8, 0x5}, {0x0, 0x6}, {0x40, 0x6}, {0x20, 0x1}, {0x7, 0x3}], "baa149cbaef37462"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x20, 0x7}, {0x3}], "085e9096866caea7"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 18:55:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001008}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r4, 0x510, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x28, 0x1, 0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x400, 0x7f, 0x0]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40885}, 0x20048004) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x71, 0x5}, {0x0, 0x6}], "d9b40c4fca0d53ca"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x1, 0x4}, {0x5, 0x1}, {0x8c, 0x7}, {0xd, 0x4}, {0x1f, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x9, 0x7}, {0x8, 0x5}, {0x0, 0x6}, {0x40, 0x6}, {0x20, 0x1}, {0x7, 0x3}], "baa149cbaef37462"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x20, 0x7}, {0x3}], "085e9096866caea7"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 18:55:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001008}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r4, 0x510, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x28, 0x1, 0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x400, 0x7f, 0x0]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40885}, 0x20048004) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x71, 0x5}, {0x0, 0x6}], "d9b40c4fca0d53ca"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x1, 0x4}, {0x5, 0x1}, {0x8c, 0x7}, {0xd, 0x4}, {0x1f, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x9, 0x7}, {0x8, 0x5}, {0x0, 0x6}, {0x40, 0x6}, {0x20, 0x1}, {0x7, 0x3}], "baa149cbaef37462"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x20, 0x7}, {0x3}], "085e9096866caea7"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 18:55:34 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', r0) 18:55:34 executing program 6: syz_open_dev$vcsn(0x0, 0x8, 0x2a0001) 18:55:34 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) r3 = fsmount(r1, 0x1, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) r4 = fsmount(r0, 0x0, 0x1) ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f0000000580)={'\x00', 0xe9f, 0x2, 0x96e}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x8041) 18:55:34 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x80}, {0x4b, 0x3}], "5d19b74e110e2a4f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x7}, {0xa5, 0x1}, {0x8e, 0x1}, {0x2, 0x1}, {0x8}, {0x8}, {0x7, 0x4}, {0x6, 0x7}, {0xe3, 0x1}, {0x1, 0x5}, {0x16, 0x3}], "653e76188a7d57ce"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0b05b3c842043735"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6}, {0x5, 0x1}, {0x81}, {0x5, 0x7}, {0xa7, 0x1}, {0x0, 0x4}, {0x6d, 0x5}, {0x28, 0x5}, {}, {0x1, 0x2}, {0xae, 0x5}, {0x40, 0x2}, {0x1f, 0x5}, {0x5, 0x7}, {0xff, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x40, 0x1}, {0xdb, 0x7}], "49b8292d9d36a76f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ddb3259bdd61947c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1f, 0x1}, {0x81, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0xfa, 0x6}, {0x8, 0x7}, {0x20, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x40, 0x5}, {0x4, 0x3}, {0x81, 0x6}, {0x7f, 0x2}, {0x20, 0x7}, {0x81, 0x2}, {0x69, 0x4}, {0x7f}, {0x20, 0x3}, {0x20}, {0x0, 0x2}, {0x8, 0x3}], "facbdfa38100f71a"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x4b, 0x6}, {0x4}, {0x20, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0x3}, {0x4, 0x1}, {0x20, 0x7}], "0e8d196468d9a792"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "315de1c7e28e475f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000000) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) ioctl$LOOP_GET_STATUS64(r6, 0x4c05, &(0x7f0000000500)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r3) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xa0, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x40800) 18:55:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001008}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r4, 0x510, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x28, 0x1, 0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x400, 0x7f, 0x0]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40885}, 0x20048004) 18:55:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001008}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r4, 0x510, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x28, 0x1, 0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x400, 0x7f, 0x0]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40885}, 0x20048004) 18:55:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001008}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r4, 0x510, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x28, 0x1, 0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x400, 0x7f, 0x0]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40885}, 0x20048004) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x2}, {0x71, 0x5}, {0x0, 0x6}], "d9b40c4fca0d53ca"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x1, 0x4}, {0x5, 0x1}, {0x8c, 0x7}, {0xd, 0x4}, {0x1f, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x9, 0x7}, {0x8, 0x5}, {0x0, 0x6}, {0x40, 0x6}, {0x20, 0x1}, {0x7, 0x3}], "baa149cbaef37462"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x20, 0x7}, {0x3}], "085e9096866caea7"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) 18:55:34 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) r3 = fsmount(r1, 0x1, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) r4 = fsmount(r0, 0x0, 0x1) ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f0000000580)={'\x00', 0xe9f, 0x2, 0x96e}) 18:55:34 executing program 6: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x2a0001) 18:55:34 executing program 4: syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x2a0001) 18:55:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) 18:55:34 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) r3 = fsmount(r1, 0x1, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) r4 = fsmount(r0, 0x0, 0x1) ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f0000000580)={'\x00', 0xe9f, 0x2, 0x96e}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x8041) 18:55:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) 18:55:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001008}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x6c, r4, 0x510, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x28, 0x1, 0x7]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x400, 0x7f, 0x0]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40885}, 0x20048004) 18:55:46 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x80}, {0x4b, 0x3}], "5d19b74e110e2a4f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x7}, {0xa5, 0x1}, {0x8e, 0x1}, {0x2, 0x1}, {0x8}, {0x8}, {0x7, 0x4}, {0x6, 0x7}, {0xe3, 0x1}, {0x1, 0x5}, {0x16, 0x3}], "653e76188a7d57ce"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0b05b3c842043735"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6}, {0x5, 0x1}, {0x81}, {0x5, 0x7}, {0xa7, 0x1}, {0x0, 0x4}, {0x6d, 0x5}, {0x28, 0x5}, {}, {0x1, 0x2}, {0xae, 0x5}, {0x40, 0x2}, {0x1f, 0x5}, {0x5, 0x7}, {0xff, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x40, 0x1}, {0xdb, 0x7}], "49b8292d9d36a76f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ddb3259bdd61947c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1f, 0x1}, {0x81, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0xfa, 0x6}, {0x8, 0x7}, {0x20, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x40, 0x5}, {0x4, 0x3}, {0x81, 0x6}, {0x7f, 0x2}, {0x20, 0x7}, {0x81, 0x2}, {0x69, 0x4}, {0x7f}, {0x20, 0x3}, {0x20}, {0x0, 0x2}, {0x8, 0x3}], "facbdfa38100f71a"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x4b, 0x6}, {0x4}, {0x20, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0x3}, {0x4, 0x1}, {0x20, 0x7}], "0e8d196468d9a792"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "315de1c7e28e475f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000000) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000480)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000500)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r3) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00'}) 18:55:46 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 18:55:46 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) r3 = fsmount(r1, 0x1, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) r4 = fsmount(r0, 0x0, 0x1) ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f0000000580)={'\x00', 0xe9f, 0x2, 0x96e}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x8041) 18:55:46 executing program 4: syz_open_dev$vcsn(0x0, 0x8, 0x2a0001) 18:55:46 executing program 6: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 18:55:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 18:55:46 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) r3 = fsmount(r1, 0x1, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) r4 = fsmount(r0, 0x0, 0x1) ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f0000000580)={'\x00', 0xe9f, 0x2, 0x96e}) 18:55:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) 18:55:47 executing program 6: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 18:55:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) r3 = fsmount(r1, 0x1, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) r4 = fsmount(r0, 0x0, 0x1) ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f0000000580)={'\x00', 0xe9f, 0x2, 0x96e}) 18:55:47 executing program 4: syz_open_dev$vcsn(0x0, 0x8, 0x2a0001) 18:55:47 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) r3 = fsmount(r1, 0x1, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) r4 = fsmount(r0, 0x0, 0x1) ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f0000000580)={'\x00', 0xe9f, 0x2, 0x96e}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x8041) 18:55:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) 18:55:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) 18:55:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) 18:55:47 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x80}, {0x4b, 0x3}], "5d19b74e110e2a4f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x7}, {0xa5, 0x1}, {0x8e, 0x1}, {0x2, 0x1}, {0x8}, {0x8}, {0x7, 0x4}, {0x6, 0x7}, {0xe3, 0x1}, {0x1, 0x5}, {0x16, 0x3}], "653e76188a7d57ce"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0b05b3c842043735"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6}, {0x5, 0x1}, {0x81}, {0x5, 0x7}, {0xa7, 0x1}, {0x0, 0x4}, {0x6d, 0x5}, {0x28, 0x5}, {}, {0x1, 0x2}, {0xae, 0x5}, {0x40, 0x2}, {0x1f, 0x5}, {0x5, 0x7}, {0xff, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x40, 0x1}, {0xdb, 0x7}], "49b8292d9d36a76f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ddb3259bdd61947c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1f, 0x1}, {0x81, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0xfa, 0x6}, {0x8, 0x7}, {0x20, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x40, 0x5}, {0x4, 0x3}, {0x81, 0x6}, {0x7f, 0x2}, {0x20, 0x7}, {0x81, 0x2}, {0x69, 0x4}, {0x7f}, {0x20, 0x3}, {0x20}, {0x0, 0x2}, {0x8, 0x3}], "facbdfa38100f71a"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x4b, 0x6}, {0x4}, {0x20, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0x3}, {0x4, 0x1}, {0x20, 0x7}], "0e8d196468d9a792"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "315de1c7e28e475f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000000) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000480)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000500)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r3) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) 18:55:47 executing program 4: syz_open_dev$vcsn(0x0, 0x8, 0x2a0001) 18:55:47 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) r3 = fsmount(r1, 0x1, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) fsmount(r0, 0x0, 0x1) 18:55:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) 18:55:59 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x80}, {0x4b, 0x3}], "5d19b74e110e2a4f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x7}, {0xa5, 0x1}, {0x8e, 0x1}, {0x2, 0x1}, {0x8}, {0x8}, {0x7, 0x4}, {0x6, 0x7}, {0xe3, 0x1}, {0x1, 0x5}, {0x16, 0x3}], "653e76188a7d57ce"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0b05b3c842043735"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6}, {0x5, 0x1}, {0x81}, {0x5, 0x7}, {0xa7, 0x1}, {0x0, 0x4}, {0x6d, 0x5}, {0x28, 0x5}, {}, {0x1, 0x2}, {0xae, 0x5}, {0x40, 0x2}, {0x1f, 0x5}, {0x5, 0x7}, {0xff, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x40, 0x1}, {0xdb, 0x7}], "49b8292d9d36a76f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ddb3259bdd61947c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1f, 0x1}, {0x81, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0xfa, 0x6}, {0x8, 0x7}, {0x20, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x40, 0x5}, {0x4, 0x3}, {0x81, 0x6}, {0x7f, 0x2}, {0x20, 0x7}, {0x81, 0x2}, {0x69, 0x4}, {0x7f}, {0x20, 0x3}, {0x20}, {0x0, 0x2}, {0x8, 0x3}], "facbdfa38100f71a"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x4b, 0x6}, {0x4}, {0x20, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0x3}, {0x4, 0x1}, {0x20, 0x7}], "0e8d196468d9a792"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "315de1c7e28e475f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000000) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000480)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000500)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), r3) 18:55:59 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) r3 = fsmount(r1, 0x1, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) 18:55:59 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) r3 = fsmount(r1, 0x1, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) r4 = fsmount(r0, 0x0, 0x1) ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f0000000580)={'\x00', 0xe9f, 0x2, 0x96e}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x8041) 18:55:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) 18:55:59 executing program 4: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x2a0001) 18:55:59 executing program 6: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 18:55:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 18:55:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) 18:55:59 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) fsmount(r1, 0x1, 0x70) 18:55:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) 18:56:10 executing program 4: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 18:56:10 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x80}, {0x4b, 0x3}], "5d19b74e110e2a4f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x7}, {0xa5, 0x1}, {0x8e, 0x1}, {0x2, 0x1}, {0x8}, {0x8}, {0x7, 0x4}, {0x6, 0x7}, {0xe3, 0x1}, {0x1, 0x5}, {0x16, 0x3}], "653e76188a7d57ce"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0b05b3c842043735"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6}, {0x5, 0x1}, {0x81}, {0x5, 0x7}, {0xa7, 0x1}, {0x0, 0x4}, {0x6d, 0x5}, {0x28, 0x5}, {}, {0x1, 0x2}, {0xae, 0x5}, {0x40, 0x2}, {0x1f, 0x5}, {0x5, 0x7}, {0xff, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x40, 0x1}, {0xdb, 0x7}], "49b8292d9d36a76f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ddb3259bdd61947c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1f, 0x1}, {0x81, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0xfa, 0x6}, {0x8, 0x7}, {0x20, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x40, 0x5}, {0x4, 0x3}, {0x81, 0x6}, {0x7f, 0x2}, {0x20, 0x7}, {0x81, 0x2}, {0x69, 0x4}, {0x7f}, {0x20, 0x3}, {0x20}, {0x0, 0x2}, {0x8, 0x3}], "facbdfa38100f71a"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x4b, 0x6}, {0x4}, {0x20, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0x3}, {0x4, 0x1}, {0x20, 0x7}], "0e8d196468d9a792"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "315de1c7e28e475f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000000) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000480)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000500)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) 18:56:10 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) r3 = fsmount(r1, 0x1, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) r4 = fsmount(r0, 0x0, 0x1) ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f0000000580)={'\x00', 0xe9f, 0x2, 0x96e}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x8041) 18:56:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) 18:56:10 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:56:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) 18:56:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) 18:56:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) 18:56:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) 18:56:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) 18:56:11 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) r3 = fsmount(r1, 0x1, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) r4 = fsmount(r0, 0x0, 0x1) ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f0000000580)={'\x00', 0xe9f, 0x2, 0x96e}) 18:56:11 executing program 4: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 18:56:11 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:56:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) 18:56:11 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x80}, {0x4b, 0x3}], "5d19b74e110e2a4f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x7}, {0xa5, 0x1}, {0x8e, 0x1}, {0x2, 0x1}, {0x8}, {0x8}, {0x7, 0x4}, {0x6, 0x7}, {0xe3, 0x1}, {0x1, 0x5}, {0x16, 0x3}], "653e76188a7d57ce"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0b05b3c842043735"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6}, {0x5, 0x1}, {0x81}, {0x5, 0x7}, {0xa7, 0x1}, {0x0, 0x4}, {0x6d, 0x5}, {0x28, 0x5}, {}, {0x1, 0x2}, {0xae, 0x5}, {0x40, 0x2}, {0x1f, 0x5}, {0x5, 0x7}, {0xff, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x40, 0x1}, {0xdb, 0x7}], "49b8292d9d36a76f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ddb3259bdd61947c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1f, 0x1}, {0x81, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0xfa, 0x6}, {0x8, 0x7}, {0x20, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x40, 0x5}, {0x4, 0x3}, {0x81, 0x6}, {0x7f, 0x2}, {0x20, 0x7}, {0x81, 0x2}, {0x69, 0x4}, {0x7f}, {0x20, 0x3}, {0x20}, {0x0, 0x2}, {0x8, 0x3}], "facbdfa38100f71a"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x4b, 0x6}, {0x4}, {0x20, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0x3}, {0x4, 0x1}, {0x20, 0x7}], "0e8d196468d9a792"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "315de1c7e28e475f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000000) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000480)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000500)) 18:56:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) 18:56:24 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x80}, {0x4b, 0x3}], "5d19b74e110e2a4f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x7}, {0xa5, 0x1}, {0x8e, 0x1}, {0x2, 0x1}, {0x8}, {0x8}, {0x7, 0x4}, {0x6, 0x7}, {0xe3, 0x1}, {0x1, 0x5}, {0x16, 0x3}], "653e76188a7d57ce"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0b05b3c842043735"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6}, {0x5, 0x1}, {0x81}, {0x5, 0x7}, {0xa7, 0x1}, {0x0, 0x4}, {0x6d, 0x5}, {0x28, 0x5}, {}, {0x1, 0x2}, {0xae, 0x5}, {0x40, 0x2}, {0x1f, 0x5}, {0x5, 0x7}, {0xff, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x40, 0x1}, {0xdb, 0x7}], "49b8292d9d36a76f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ddb3259bdd61947c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1f, 0x1}, {0x81, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0xfa, 0x6}, {0x8, 0x7}, {0x20, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x40, 0x5}, {0x4, 0x3}, {0x81, 0x6}, {0x7f, 0x2}, {0x20, 0x7}, {0x81, 0x2}, {0x69, 0x4}, {0x7f}, {0x20, 0x3}, {0x20}, {0x0, 0x2}, {0x8, 0x3}], "facbdfa38100f71a"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x4b, 0x6}, {0x4}, {0x20, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0x3}, {0x4, 0x1}, {0x20, 0x7}], "0e8d196468d9a792"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "315de1c7e28e475f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000000) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000480)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x840, 0x0) 18:56:24 executing program 4: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 18:56:24 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:56:24 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) r3 = fsmount(r1, 0x1, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) fsmount(r0, 0x0, 0x1) 18:56:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fsmount(r1, 0x1, 0x1) 18:56:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) 18:56:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) 18:56:24 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) 18:56:24 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000340)='htcp\x00', 0x5) 18:56:24 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) r3 = fsmount(r1, 0x1, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) 18:56:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) 18:56:24 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:56:24 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:56:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) 18:56:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) fsmount(r1, 0x1, 0x1) 18:56:24 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x80}, {0x4b, 0x3}], "5d19b74e110e2a4f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x7}, {0xa5, 0x1}, {0x8e, 0x1}, {0x2, 0x1}, {0x8}, {0x8}, {0x7, 0x4}, {0x6, 0x7}, {0xe3, 0x1}, {0x1, 0x5}, {0x16, 0x3}], "653e76188a7d57ce"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0b05b3c842043735"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6}, {0x5, 0x1}, {0x81}, {0x5, 0x7}, {0xa7, 0x1}, {0x0, 0x4}, {0x6d, 0x5}, {0x28, 0x5}, {}, {0x1, 0x2}, {0xae, 0x5}, {0x40, 0x2}, {0x1f, 0x5}, {0x5, 0x7}, {0xff, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x40, 0x1}, {0xdb, 0x7}], "49b8292d9d36a76f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ddb3259bdd61947c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1f, 0x1}, {0x81, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0xfa, 0x6}, {0x8, 0x7}, {0x20, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x40, 0x5}, {0x4, 0x3}, {0x81, 0x6}, {0x7f, 0x2}, {0x20, 0x7}, {0x81, 0x2}, {0x69, 0x4}, {0x7f}, {0x20, 0x3}, {0x20}, {0x0, 0x2}, {0x8, 0x3}], "facbdfa38100f71a"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x4b, 0x6}, {0x4}, {0x20, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0x3}, {0x4, 0x1}, {0x20, 0x7}], "0e8d196468d9a792"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "315de1c7e28e475f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000000) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000480)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r4) 18:56:24 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000340)='htcp\x00', 0x5) 18:56:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) 18:56:24 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) fsmount(r1, 0x1, 0x70) 18:56:37 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:56:37 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:56:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000340)='htcp\x00', 0x5) 18:56:37 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x80}, {0x4b, 0x3}], "5d19b74e110e2a4f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x7}, {0xa5, 0x1}, {0x8e, 0x1}, {0x2, 0x1}, {0x8}, {0x8}, {0x7, 0x4}, {0x6, 0x7}, {0xe3, 0x1}, {0x1, 0x5}, {0x16, 0x3}], "653e76188a7d57ce"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0b05b3c842043735"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6}, {0x5, 0x1}, {0x81}, {0x5, 0x7}, {0xa7, 0x1}, {0x0, 0x4}, {0x6d, 0x5}, {0x28, 0x5}, {}, {0x1, 0x2}, {0xae, 0x5}, {0x40, 0x2}, {0x1f, 0x5}, {0x5, 0x7}, {0xff, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x40, 0x1}, {0xdb, 0x7}], "49b8292d9d36a76f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ddb3259bdd61947c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1f, 0x1}, {0x81, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0xfa, 0x6}, {0x8, 0x7}, {0x20, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x40, 0x5}, {0x4, 0x3}, {0x81, 0x6}, {0x7f, 0x2}, {0x20, 0x7}, {0x81, 0x2}, {0x69, 0x4}, {0x7f}, {0x20, 0x3}, {0x20}, {0x0, 0x2}, {0x8, 0x3}], "facbdfa38100f71a"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x4b, 0x6}, {0x4}, {0x20, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0x3}, {0x4, 0x1}, {0x20, 0x7}], "0e8d196468d9a792"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "315de1c7e28e475f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000000) socketpair(0x15, 0x80000, 0x5, &(0x7f0000000480)) 18:56:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) 18:56:37 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:56:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fsmount(r1, 0x1, 0x1) 18:56:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) 18:56:37 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:56:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fsmount(r1, 0x1, 0x1) 18:56:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000340)='htcp\x00', 0x5) 18:56:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) fsmount(r1, 0x1, 0x1) 18:56:37 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) r3 = syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x108, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x80}, {0x4b, 0x3}], "5d19b74e110e2a4f"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x5, 0x7}, {0xa5, 0x1}, {0x8e, 0x1}, {0x2, 0x1}, {0x8}, {0x8}, {0x7, 0x4}, {0x6, 0x7}, {0xe3, 0x1}, {0x1, 0x5}, {0x16, 0x3}], "653e76188a7d57ce"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "0b05b3c842043735"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x6}, {0x5, 0x1}, {0x81}, {0x5, 0x7}, {0xa7, 0x1}, {0x0, 0x4}, {0x6d, 0x5}, {0x28, 0x5}, {}, {0x1, 0x2}, {0xae, 0x5}, {0x40, 0x2}, {0x1f, 0x5}, {0x5, 0x7}, {0xff, 0x3}, {0x0, 0x3}, {0x4, 0x5}, {0x40, 0x1}, {0xdb, 0x7}], "49b8292d9d36a76f"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ddb3259bdd61947c"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x1f, 0x1}, {0x81, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0xfa, 0x6}, {0x8, 0x7}, {0x20, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x40, 0x5}, {0x4, 0x3}, {0x81, 0x6}, {0x7f, 0x2}, {0x20, 0x7}, {0x81, 0x2}, {0x69, 0x4}, {0x7f}, {0x20, 0x3}, {0x20}, {0x0, 0x2}, {0x8, 0x3}], "facbdfa38100f71a"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x7, 0x1}, {0x0, 0x2}, {0x4, 0x7}, {0x4b, 0x6}, {0x4}, {0x20, 0x1}, {0x8, 0x2}, {0x9, 0x3}, {0x40, 0x3}, {0x4, 0x1}, {0x20, 0x7}], "0e8d196468d9a792"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "315de1c7e28e475f"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000000) 18:56:37 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:56:37 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) 18:56:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 18:56:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000340)='htcp\x00', 0x5) 18:56:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000340)='htcp\x00', 0x5) 18:56:37 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x109002) 18:56:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) 18:56:48 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:56:48 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) r3 = fsmount(r1, 0x1, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) fsmount(r0, 0x0, 0x1) 18:56:48 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) 18:56:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000340)='htcp\x00', 0x5) 18:56:48 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000810) 18:56:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) fsmount(r1, 0x1, 0x1) 18:56:48 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:56:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000340)='htcp\x00', 0x5) 18:57:00 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) 18:57:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000300)={0x9, 0x4}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = fsmount(r1, 0x1, 0x1) write$tcp_congestion(r2, &(0x7f0000000340)='htcp\x00', 0x5) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000380)=0x1f, &(0x7f00000003c0)=0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000400)=0x5, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0xfffffffffffffffa) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 18:57:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 18:57:00 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000340)='htcp\x00', 0x5) 18:57:00 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:00 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) 18:57:00 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) fsmount(0xffffffffffffffff, 0x1, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) fsmount(r1, 0x1, 0x1) 18:57:00 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 18:57:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) fsmount(0xffffffffffffffff, 0x1, 0x1) 18:57:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x101, 0x2) 18:57:00 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:00 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:00 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 18:57:00 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000340)='htcp\x00', 0x5) 18:57:00 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x80000) 18:57:00 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) r3 = fsmount(r1, 0x1, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) r4 = fsmount(r0, 0x0, 0x1) ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f0000000580)={'\x00', 0xe9f, 0x2, 0x96e}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x8041) 18:57:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) 18:57:13 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) r3 = fsmount(r1, 0x1, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) r4 = fsmount(r0, 0x0, 0x1) ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f0000000580)={'\x00', 0xe9f, 0x2, 0x96e}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x8041) 18:57:13 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:13 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 18:57:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) 18:57:13 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) r0 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 18:57:13 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) fsmount(0xffffffffffffffff, 0x1, 0x1) 18:57:13 executing program 7: write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000340)='htcp\x00', 0x5) 18:57:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) 18:57:13 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) fsmount(0xffffffffffffffff, 0x1, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 18:57:13 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000300)={0x1, 0x2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000340)={'\x00', 0x5, 0x1, 0x8}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x40000) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000400)={0x18, ""/24}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) r3 = fsmount(r1, 0x1, 0x70) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) r4 = fsmount(r0, 0x0, 0x1) ioctl$PTP_PIN_GETFUNC(r4, 0xc0603d06, &(0x7f0000000580)={'\x00', 0xe9f, 0x2, 0x96e}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x8041) 18:57:13 executing program 2: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x12) syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) 18:57:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) fsmount(0xffffffffffffffff, 0x1, 0x1) 18:57:13 executing program 7: write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) 18:57:13 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:13 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) fsmount(0xffffffffffffffff, 0x1, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x8001, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) 18:57:25 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:25 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:57:25 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) fsmount(r0, 0x1, 0x1) 18:57:25 executing program 2: syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffff4d8d, 0x111041) 18:57:25 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:25 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000280)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 18:57:25 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x2ca, &(0x7f0000000040)=0x2) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) 18:57:25 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:57:25 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:25 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:25 executing program 2: syz_open_dev$loop(0x0, 0xffffffffffff4d8d, 0x111041) 18:57:25 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) fsmount(r0, 0x1, 0x1) 18:57:25 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:57:25 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) 18:57:25 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 18:57:25 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x2) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:25 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) fsmount(r0, 0x1, 0x1) 18:57:39 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:39 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) 18:57:39 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:57:39 executing program 5: r0 = syz_open_dev$vcsn(0x0, 0x3, 0x0) fsmount(r0, 0x1, 0x1) 18:57:39 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:57:39 executing program 2: syz_open_dev$loop(0x0, 0xffffffffffff4d8d, 0x111041) 18:57:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_setup(0x6330, &(0x7f0000000180)={0x0, 0x1c43, 0x10, 0x0, 0x160}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 18:57:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:39 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) 18:57:51 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:51 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:57:51 executing program 5: r0 = syz_open_dev$vcsn(0x0, 0x3, 0x0) fsmount(r0, 0x1, 0x1) 18:57:51 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) 18:57:51 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) 18:57:51 executing program 3: msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:51 executing program 2: syz_open_dev$loop(0x0, 0xffffffffffff4d8d, 0x111041) 18:57:51 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 18:57:51 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) 18:57:51 executing program 5: r0 = syz_open_dev$vcsn(0x0, 0x3, 0x0) fsmount(r0, 0x1, 0x1) 18:57:51 executing program 2: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x111041) 18:57:51 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:51 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) 18:57:51 executing program 1: r0 = syz_open_dev$vcsn(0x0, 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) 18:57:51 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000100)={0x6, 0xc}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 18:57:51 executing program 3: msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) 18:57:51 executing program 4: syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:51 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x0) fsmount(r0, 0x1, 0x1) 18:57:51 executing program 2: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) 18:57:51 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:57:51 executing program 4: msgrcv(0xffffffffffffffff, &(0x7f0000000440)={0x0, ""/218}, 0xe2, 0x3, 0x0) 18:57:51 executing program 3: msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:57:51 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) 18:58:05 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) read$hiddev(r0, &(0x7f0000000040)=""/139, 0x8b) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 18:58:05 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) 18:58:05 executing program 4: msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) 18:58:05 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x0) fsmount(r0, 0x1, 0x1) 18:58:05 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) 18:58:05 executing program 2: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) 18:58:05 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:58:05 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) 18:58:19 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) 18:58:19 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:58:19 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:58:19 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x0) fsmount(r0, 0x1, 0x1) 18:58:19 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) 18:58:19 executing program 2: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) 18:58:19 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x80880) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 18:58:19 executing program 4: msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:58:19 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) 18:58:19 executing program 0: io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 18:58:19 executing program 1: syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) 18:58:19 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:58:19 executing program 3: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) 18:58:19 executing program 5: syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x1) 18:58:19 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:58:19 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:58:19 executing program 3: syz_open_dev$loop(0x0, 0x0, 0x0) 18:58:19 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:58:19 executing program 5: syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x1) 18:58:19 executing program 1: syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) 18:58:19 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:58:19 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:58:19 executing program 5: syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x1) 18:58:19 executing program 3: syz_open_dev$loop(0x0, 0x0, 0x0) 18:58:19 executing program 1: syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x10) 18:58:19 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:58:31 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:58:31 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:58:31 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:58:31 executing program 3: syz_open_dev$loop(0x0, 0x0, 0x0) 18:58:31 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:58:32 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) fsmount(r0, 0x0, 0x1) 18:58:32 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x10) 18:58:32 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:58:45 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) fsmount(r0, 0x0, 0x0) 18:58:45 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) 18:58:45 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:58:45 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:58:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x3, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) 18:58:45 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:58:45 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:58:45 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:58:45 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r6, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:58:45 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) 18:58:45 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:58:45 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:58:45 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:58:45 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:58:45 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r6, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:58:45 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) 18:58:45 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) 18:58:45 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) 18:58:45 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r6, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:58:45 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:58:45 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) 18:58:45 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:58:59 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:58:59 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:58:59 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:58:59 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) 18:58:59 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:58:59 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:58:59 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:58:59 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r6, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:58:59 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:58:59 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:59:11 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:59:11 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r3, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:59:11 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:59:11 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) 18:59:11 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:59:11 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) 18:59:11 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:59:11 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:59:11 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:59:11 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r3, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:59:11 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) 18:59:11 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 18:59:11 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 18:59:11 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) 18:59:11 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:59:11 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 18:59:11 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 18:59:11 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r3, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:59:11 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:59:24 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:59:24 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r3, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:59:24 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:59:24 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) 18:59:24 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:59:24 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) 18:59:24 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) 18:59:24 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 18:59:24 executing program 6: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:59:24 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r3, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:59:25 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 18:59:25 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) 18:59:25 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) 18:59:25 executing program 6: openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:59:25 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:59:25 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 18:59:25 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) 18:59:25 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:59:25 executing program 6: openat$null(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 18:59:36 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:59:36 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 18:59:36 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 18:59:36 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:59:36 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) 18:59:36 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) 18:59:36 executing program 6: openat$null(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 18:59:36 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) 18:59:36 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 18:59:37 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:59:37 executing program 6: openat$null(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 18:59:37 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) 18:59:37 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) 18:59:37 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 18:59:37 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) 18:59:49 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 18:59:49 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) 18:59:49 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) 18:59:49 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 18:59:49 executing program 6: openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) 18:59:49 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 18:59:49 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) 18:59:49 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) 18:59:49 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) 18:59:49 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) 19:00:03 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 19:00:03 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) 19:00:03 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) 19:00:03 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) 19:00:03 executing program 6: openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) 19:00:03 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) 19:00:03 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 19:00:03 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) 19:00:03 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) 19:00:03 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) 19:00:03 executing program 6: openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) 19:00:03 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 19:00:03 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 19:00:03 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) 19:00:03 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) 19:00:16 executing program 7: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 19:00:16 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 19:00:16 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) 19:00:16 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) 19:00:16 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 19:00:16 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) 19:00:16 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) 19:00:16 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) 19:00:16 executing program 7: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 19:00:16 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) 19:00:16 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 19:00:16 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 19:00:16 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) 19:00:16 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) 19:00:16 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) 19:00:16 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) 19:00:16 executing program 7: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 19:00:16 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 19:00:16 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) 19:00:16 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 19:00:16 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 19:00:16 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 19:00:16 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) 19:00:16 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 19:00:16 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 19:00:16 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) 19:00:16 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) 19:00:16 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 19:00:29 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 19:00:29 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 19:00:29 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) 19:00:29 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 19:00:29 executing program 7: openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 19:00:29 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) 19:00:29 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) 19:00:29 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) 19:00:29 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) 19:00:29 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 19:00:29 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) 19:00:29 executing program 7: openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 19:00:29 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) 19:00:42 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) 19:00:42 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 19:00:42 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) 19:00:42 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) 19:00:42 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 19:00:42 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) 19:00:42 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 19:00:42 executing program 7: openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 19:00:42 executing program 0: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) 19:00:42 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 19:00:42 executing program 2: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 19:00:42 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) 19:00:42 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, 0x0) 19:00:57 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 19:00:57 executing program 2: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x4) 19:00:57 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) 19:00:57 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) 19:00:57 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 19:00:57 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) 19:00:57 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 19:00:57 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r2, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 19:00:57 executing program 3: read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0x8) 19:00:57 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 19:00:57 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) 19:00:57 executing program 2: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x0) 19:00:57 executing program 1: syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) 19:00:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 19:00:57 executing program 3: read$rfkill(0xffffffffffffffff, 0x0, 0x0) 19:01:11 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 19:01:11 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) 19:01:11 executing program 1: syz_open_dev$vcsn(0x0, 0x6, 0x5a3000) 19:01:11 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) 19:01:11 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) 19:01:11 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) 19:01:11 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) 19:01:11 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 19:01:11 executing program 1: syz_open_dev$vcsn(0x0, 0x6, 0x5a3000) 19:01:11 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) 19:01:11 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 19:01:11 executing program 1: syz_open_dev$vcsn(0x0, 0x6, 0x5a3000) 19:01:11 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 19:01:11 executing program 1: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x5a3000) 19:01:11 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) 19:01:11 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) socket$nl_generic(0x10, 0x3, 0x10) 19:01:11 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) 19:01:11 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) 19:01:11 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 19:01:11 executing program 1: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 19:01:11 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) 19:01:24 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) 19:01:24 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) 19:01:24 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) 19:01:24 executing program 3: read$rfkill(0xffffffffffffffff, 0x0, 0x0) (fail_nth: 1) 19:01:24 executing program 1: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 19:01:24 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r3 = fsmount(r2, 0x0, 0x1) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000003c0)='}\'\x00', &(0x7f0000000400)="1190ae2ba47eb0db22611e4faed2267c0c417ff73580f31d62356ace00108dadfb993e824ec30c34ed7c3d309b9c98ada725eb19f9ace004fb971b93025c55d45eb5c76c9d8011dbd3367e4ed3c9cffe1ecb951a8a59aeec622bcd9b9812afa7200ee2f195ff9706aa711df89294623cbf6427eda3ab34d5dc21fce30b5ae9fcb99d0052378beca432b697eda0c9f48bbe29bdeb383b0cbd009d9529ba538942cd94e6804cfbe961cd087be6ba32658aa111ff86773c9cfe26b0eac7d99c996004a9a745ef7a00aa008d58c9dc93afb98a0d0c384a273f40cd", 0xd9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x41) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$PTP_PIN_GETFUNC(r8, 0xc0603d06, &(0x7f0000000680)={'\x00', 0x401, 0x1, 0xffffffff}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x58800}, 0x20004040) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000800)=0x4, 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x0, 0xfffffffa, {{0x12, 0x4, 0x0, 0x3c, 0x48, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x1f, 0x3, [{0x6, 0xc, "3dd24516a1458315924c"}, {0x6, 0xd, "6cbb5f466d793ae23ae088"}]}, @lsrr={0x83, 0x13, 0x3a, [@local, @private=0xa010101, @private=0xa010101, @loopback]}]}}}}}) 19:01:24 executing program 0: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x0) (fail_nth: 1) 19:01:24 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) [ 2431.451034] FAULT_INJECTION: forcing a failure. [ 2431.451034] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2431.452284] CPU: 1 PID: 13872 Comm: syz-executor.0 Not tainted 6.0.0-rc1-next-20220819 #1 [ 2431.452499] FAULT_INJECTION: forcing a failure. [ 2431.452499] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2431.452994] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1521 [ 2431.453006] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 13872, name: syz-executor.0 [ 2431.453023] preempt_count: 0, expected: 0 [ 2431.456174] RCU nest depth: 0, expected: 0 [ 2431.456574] 1 lock held by syz-executor.0/13872: [ 2431.456987] #0: ffff88801d523768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 2431.457757] irq event stamp: 370 [ 2431.458049] hardirqs last enabled at (369): [] __up_console_sem+0x78/0x80 [ 2431.458785] hardirqs last disabled at (370): [] dump_stack_lvl+0x2e/0xb3 [ 2431.459469] softirqs last enabled at (284): [] __irq_exit_rcu+0x11b/0x180 [ 2431.460183] softirqs last disabled at (157): [] __irq_exit_rcu+0x11b/0x180 [ 2431.460892] CPU: 1 PID: 13872 Comm: syz-executor.0 Not tainted 6.0.0-rc1-next-20220819 #1 [ 2431.470949] syz-executor.0[13872] cmdline: /syz-executor.0 exec [ 2431.471511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2431.472846] Call Trace: [ 2431.473076] [ 2431.473285] dump_stack_lvl+0x8b/0xb3 [ 2431.473630] __might_resched.cold+0x222/0x26b [ 2431.474068] down_read_killable+0x75/0x490 [ 2431.474447] ? lock_release+0x3b2/0x750 [ 2431.474846] ? down_read_interruptible+0x490/0x490 [ 2431.475280] ? lock_downgrade+0x6d0/0x6d0 [ 2431.475663] __access_remote_vm+0xac/0x6f0 [ 2431.476079] ? follow_phys+0x2c0/0x2c0 [ 2431.476451] ? do_raw_spin_lock+0x121/0x260 [ 2431.476876] ? rwlock_bug.part.0+0x90/0x90 [ 2431.477275] get_mm_cmdline.part.0+0x214/0x600 [ 2431.477720] ? dname_to_vma_addr.isra.0+0x360/0x360 [ 2431.478164] get_task_cmdline_kernel+0x1e9/0x230 [ 2431.478601] dump_stack_print_cmdline.part.0+0x82/0x150 [ 2431.479085] ? _atomic_dec_and_lock_irqsave+0x150/0x150 [ 2431.479564] ? __wake_up_klogd.part.0+0xc5/0xf0 [ 2431.480042] ? dump_stack_print_info+0xc6/0x190 [ 2431.480465] dump_stack_print_info+0x185/0x190 [ 2431.480926] dump_stack_lvl+0x7f/0xb3 [ 2431.481268] should_fail.cold+0x5/0xa [ 2431.481654] _copy_to_user+0x2a/0x140 [ 2431.482136] simple_read_from_buffer+0xcc/0x160 [ 2431.482585] proc_fail_nth_read+0x198/0x230 [ 2431.482983] ? proc_tid_comm_permission+0x1c0/0x1c0 [ 2431.483420] ? security_file_permission+0xb1/0xe0 [ 2431.483883] vfs_read+0x253/0x930 [ 2431.484203] ? proc_tid_comm_permission+0x1c0/0x1c0 [ 2431.484700] ? kernel_read+0x1c0/0x1c0 [ 2431.485053] ? __fget_files+0x270/0x450 [ 2431.485422] ksys_read+0x127/0x250 [ 2431.485777] ? __ia32_sys_pwrite64+0x220/0x220 [ 2431.486188] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.486646] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.487136] do_syscall_64+0x3b/0x90 [ 2431.487470] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2431.487963] RIP: 0033:0x7fb93fa0369c [ 2431.488401] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2431.490400] RSP: 002b:00007fb93cfc6170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2431.491248] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fb93fa0369c [ 2431.491931] RDX: 000000000000000f RSI: 00007fb93cfc61e0 RDI: 0000000000000003 [ 2431.492558] RBP: 00007fb93cfc61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2431.493172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2431.493808] R13: 00007fff899aa50f R14: 00007fb93cfc6300 R15: 0000000000022000 [ 2431.494431] 19:01:24 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x6, 0x5a3000) read$rfkill(r2, &(0x7f00000000c0), 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x135f57f3b3b1d1e6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) fsmount(r2, 0x0, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r2) [ 2431.546448] syz-executor.0[13872] cmdline: /syz-executor.0 exec [ 2431.546990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2431.547923] Call Trace: [ 2431.548149] [ 2431.548342] dump_stack_lvl+0x8b/0xb3 [ 2431.548724] should_fail.cold+0x5/0xa [ 2431.549061] _copy_to_user+0x2a/0x140 [ 2431.549392] simple_read_from_buffer+0xcc/0x160 [ 2431.549830] proc_fail_nth_read+0x198/0x230 [ 2431.550205] ? proc_tid_comm_permission+0x1c0/0x1c0 [ 2431.550640] ? security_file_permission+0xb1/0xe0 [ 2431.551069] vfs_read+0x253/0x930 [ 2431.551371] ? proc_tid_comm_permission+0x1c0/0x1c0 [ 2431.551826] ? kernel_read+0x1c0/0x1c0 [ 2431.552166] ? __fget_files+0x270/0x450 [ 2431.552533] ksys_read+0x127/0x250 [ 2431.552859] ? __ia32_sys_pwrite64+0x220/0x220 [ 2431.553251] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.553732] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.554177] do_syscall_64+0x3b/0x90 [ 2431.554506] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2431.554959] RIP: 0033:0x7fb93fa0369c [ 2431.555256] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2431.556694] RSP: 002b:00007fb93cfc6170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2431.557277] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fb93fa0369c [ 2431.557884] RDX: 000000000000000f RSI: 00007fb93cfc61e0 RDI: 0000000000000003 [ 2431.558464] RBP: 00007fb93cfc61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2431.559096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2431.559721] R13: 00007fff899aa50f R14: 00007fb93cfc6300 R15: 0000000000022000 [ 2431.560308] [ 2431.560528] CPU: 0 PID: 13875 Comm: syz-executor.3 Tainted: G W 6.0.0-rc1-next-20220819 #1 19:01:24 executing program 1: syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) 19:01:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x41) 19:01:24 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x200280, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) [ 2431.649783] syz-executor.3[13875] cmdline: /syz-executor.3 exec [ 2431.650317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2431.651367] Call Trace: [ 2431.651598] [ 2431.651811] dump_stack_lvl+0x8b/0xb3 [ 2431.652130] should_fail.cold+0x5/0xa [ 2431.652455] _copy_to_user+0x2a/0x140 [ 2431.652811] simple_read_from_buffer+0xcc/0x160 [ 2431.653190] proc_fail_nth_read+0x198/0x230 [ 2431.653553] ? proc_tid_comm_permission+0x1c0/0x1c0 [ 2431.653969] ? security_file_permission+0xb1/0xe0 [ 2431.654363] vfs_read+0x253/0x930 [ 2431.654663] ? proc_tid_comm_permission+0x1c0/0x1c0 [ 2431.655086] ? kernel_read+0x1c0/0x1c0 [ 2431.655402] ? __fget_files+0x270/0x450 [ 2431.655771] ksys_read+0x127/0x250 [ 2431.656075] ? __ia32_sys_pwrite64+0x220/0x220 [ 2431.656462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.656920] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2431.657347] do_syscall_64+0x3b/0x90 [ 2431.657656] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2431.658093] RIP: 0033:0x7fa65b92069c [ 2431.658391] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2431.659782] RSP: 002b:00007fa658ee3170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2431.660380] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fa65b92069c [ 2431.660961] RDX: 000000000000000f RSI: 00007fa658ee31e0 RDI: 0000000000000003 [ 2431.661505] RBP: 00007fa658ee31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2431.662081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2431.662707] R13: 00007ffd2327cfcf R14: 00007fa658ee3300 R15: 0000000000022000 [ 2431.663374] VM DIAGNOSIS: 19:01:24 Registers: info registers vcpu 0 RAX=00000000000356ee RBX=0000000000000001 RCX=ffffc900009cc000 RDX=0000000000040000 RSI=ffffffff812bc116 RDI=0000000000000005 RBP=0000000000000000 RSP=ffff88800f1afbf8 R8 =0000000000000005 R9 =00000000ffffffff R10=0000000000000001 R11=0000000000000001 R12=ffffffff849fc940 R13=0000000000000000 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff812bc118 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa658ee3700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa658ee2f78 CR3=000000000f9a8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8240add1 RDI=ffffffff8762a6c0 RBP=ffffffff8762a680 RSP=ffff888037987260 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000064 R11=0000000000000001 R12=0000000000000064 R13=ffffffff8762a680 R14=0000000000000010 R15=ffffffff8240adc0 RIP=ffffffff8240ae29 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb93cfc6700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2a94d22d58 CR3=0000000038226000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000