Warning: Permanently added '[localhost]:31822' (ECDSA) to the list of known hosts. 2022/10/03 02:00:04 fuzzer started 2022/10/03 02:00:04 dialing manager at localhost:35095 syzkaller login: [ 41.205045] cgroup: Unknown subsys name 'net' [ 41.329919] cgroup: Unknown subsys name 'rlimit' 2022/10/03 02:00:18 syscalls: 204 2022/10/03 02:00:18 code coverage: enabled 2022/10/03 02:00:18 comparison tracing: enabled 2022/10/03 02:00:18 extra coverage: enabled 2022/10/03 02:00:18 setuid sandbox: enabled 2022/10/03 02:00:18 namespace sandbox: enabled 2022/10/03 02:00:18 Android sandbox: enabled 2022/10/03 02:00:18 fault injection: enabled 2022/10/03 02:00:18 leak checking: enabled 2022/10/03 02:00:18 net packet injection: enabled 2022/10/03 02:00:18 net device setup: enabled 2022/10/03 02:00:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 02:00:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 02:00:18 USB emulation: enabled 2022/10/03 02:00:18 hci packet injection: enabled 2022/10/03 02:00:18 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 02:00:18 802.15.4 emulation: enabled 2022/10/03 02:00:18 fetching corpus: 0, signal 0/0 (executing program) 2022/10/03 02:00:19 starting 8 fuzzer processes 02:00:19 executing program 0: r0 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000009, 0x50, 0xffffffffffffffff, 0x10000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r1, 0x8, 0x0, 0xb8a0, 0x4, 0x1}, 0x9) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x8040) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x55a}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20001850}, 0xc0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x101, 0x0) io_uring_setup(0x36b6, &(0x7f00000004c0)={0x0, 0x406e, 0x10, 0x1, 0x103, 0x0, r4}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x6ba47bd7fccb6eb5}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe8, r6, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x479}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3d}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40840}, 0x4000010) get_mempolicy(&(0x7f0000000780), &(0x7f00000007c0), 0x9, &(0x7f0000ffc000/0x4000)=nil, 0x2) get_mempolicy(&(0x7f0000000800), &(0x7f0000000840), 0x6, &(0x7f0000ffb000/0x4000)=nil, 0x5) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r8, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x627}]}, 0x38}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r9, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0xa0220000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r6, 0x2, 0x38, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x88) 02:00:19 executing program 1: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5a000100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040880}, 0x20008000) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80010440}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x5, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x20008800) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "9b4870ec3767fb1feecabdd05c3917ee"}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x154, 0x0, 0x10, 0x70bd2c, 0xfff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x410}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb8}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6da}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x62b}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3240}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xba}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xdad}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0xc801}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4008800) r3 = socket(0x15, 0x6, 0x8) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="37d2cd6a46e7"}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40002) r4 = syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xbaa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x3c}}, 0x110) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7f}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40400d5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000f40)={&(0x7f0000000e00), 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) 02:00:19 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) keyctl$negate(0xd, r0, 0x1, r0) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, r3) r4 = add_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540), 0x0, r3) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={r4, 0xbd, 0x13}, &(0x7f00000005c0)={'enc=', 'pkcs1', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f0000000640)="f077c074fe0280996d68618b5c1f1d3404b9b90a09c2af0faef2b06502f959c26035a0777eab4e622d9b282e0acc2c7f41bf6e4b5028c3a6dfee99856f43902edffdabcd711bc5d2e6d1f4430a3ac18b301afbe115636762fa092030f9f4bc06ed7857457b0cc3a7e23e39f26dfa5bfc58113379cbc0b94cb6b8e1fa066ed0592a9e3ea46f87626cc82fe7ee99f7033b96ef2f1e634a71c369991b941fb287a2ea969851b332b80bd2544739f02bf042ceb2646b5d7216ede2a41d6ca7", &(0x7f0000000700)=""/19) r5 = geteuid() keyctl$chown(0x4, r4, r5, r2) geteuid() keyctl$get_persistent(0x16, r5, r4) r6 = syz_io_uring_complete(0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x95) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040811}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, r6, 0x8000000) 02:00:19 executing program 3: socket$packet(0x11, 0x2, 0x300) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x200c4}, 0x80) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4044004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048054}, 0x40) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x100, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x24}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0xc}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x2001}, 0x8840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) socketpair(0x23, 0x6, 0x5, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x0, 0x12c, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) socketpair(0x1a, 0x1, 0x9, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044090}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x3, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x800) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001640)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000000a40)={0xbb8, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x8}, 0xbc, 0x3f, 0x4, 0x800, 0x18, 'syz0\x00', "cc0cc613c39b68fcb43bf5e8713278d025a25c2c2a8206cda67bfd20f2223a87", "40c78e6340b8ef1e4584c96b0b66b5e0b93d50579004c88027b79af60de4910e", [{0x3ff, 0x1, {0x2, 0x76a903df}}, {0x3, 0x7ff, {0x2}}, {0x9, 0x400, {0x1, 0x8}}, {0x80, 0xedb, {0x3, 0x3}}, {0x3, 0x9, {0x2, 0x4}}, {0x4, 0x81, {0x2, 0x38a1}}, {0x5, 0x7, {0x2, 0xffffffe0}}, {0x3ff, 0x67, {0x0, 0xe0c}}, {0xfff, 0x6, {0x1, 0xfffffff9}}, {0xfffb, 0x401, {0x1, 0x81}}, {0x8000, 0x7, {0x3, 0x2}}, {0x80, 0xfffa, {0x0, 0x66}}, {0x3ff, 0x44f, {0x1, 0x100}}, {0x6c23, 0x2, {0x1, 0x2}}, {0x7, 0x8000, {0x1, 0x3}}, {0x9, 0x0, {0x3, 0xd6}}, {0x200, 0x0, {0x8055bb359099c487, 0x8}}, {0xb80, 0xe2c, {0x3, 0x97}}, {0x3, 0x3, {0x1, 0x5}}, {0xfff, 0x8b, {0x3, 0x93}}, {0x3ff, 0x3, {0x2, 0x7}}, {0x7, 0xffff, {0x2, 0x6}}, {0x3, 0x4, {0x3, 0xffffff94}}, {0x7, 0x2, {0x1, 0x3}}, {0x9, 0x4, {0x2, 0x3}}, {0xfff, 0x4, {0x0, 0x1}}, {0xfffd, 0xffff, {0x1, 0xfffffffa}}, {0x7bba, 0x1f, {0x2, 0x9}}, {0x5ac, 0xfffa, {0x2, 0x800}}, {0x7, 0x0, {0x1, 0x5}}, {0x1000, 0x2, {0x3, 0x5}}, {0x6, 0x3, {0x1, 0x81}}, {0x0, 0x4, {0x1, 0xef6d}}, {0x1, 0x1, {0x2, 0x10000}}, {0x3f, 0x81, {0x0, 0x2}}, {0x2, 0x8966, {0x2, 0x9}}, {0x5, 0x40, {0x3, 0x8000}}, {0x101, 0x8000, {0x1, 0xfffffffe}}, {0x6, 0x9, {0x3, 0x2}}, {0x3, 0x7, {0x0, 0x101}}]}}}, {{0x254, 0x1, {{0x2, 0x64a}, 0xff, 0x7f, 0x2, 0xc92, 0xd, 'syz0\x00', "5c860f3c6791e89ff06f5ac820d6fc492a04fbb5ed2480429a70d9c2f272af2f", "775a84e47f380815c66a0cd56030c9f30808a922a5754aeca93bf353625a71a4", [{0x2, 0x2, {0x2, 0x3ff}}, {0x5, 0x7, {0x3, 0xffffffe0}}, {0x0, 0x7f, {0x1, 0x5}}, {0x68, 0xfffb, {0x0, 0x400}}, {0x200, 0xff81, {0x2, 0x1ff}}, {0x81, 0x6}, {0x1000, 0x7, {0x2, 0x8}}, {0x7fff, 0x7, {0x1}}, {0x5, 0x584a, {0x2, 0x5}}, {0x6, 0x401, {0x3}}, {0x1f, 0x101}, {0x0, 0x3, {0x0, 0x8}}, {0x0, 0x80, {0x1, 0xfffffff7}}, {0x567, 0x60, {0x0, 0x1f}}, {0xffff, 0x8000, {0x1, 0xe24}}, {0x130, 0x3}, {0x8, 0xe4, {0x1, 0x7}}, {0x80, 0x6, {0x3, 0x3f}}, {0xffff, 0x0, {0x1, 0x6}}, {0x6, 0x1, {0x3, 0x1}}, {0x5, 0x6, {0x3, 0xffff}}, {0x7, 0x800, {0x1, 0x5}}, {0x7ff, 0x7fff, {0x2, 0x7}}, {0x57b3, 0x7, {0x3, 0x6b69}}, {0x1, 0xfff, {0x2, 0x20d1}}, {0x3f, 0x3, {0x2, 0x3}}, {0xe25c, 0x7ff, {0x1, 0x400}}, {0x6, 0x9, {0x0, 0x10000}}, {0xb4, 0x8001, {0x3, 0x1}}, {0x2, 0x0, {0x2}}, {0x401, 0x20, {0x3, 0x6d51}}, {0x2, 0x0, {0x2, 0x4}}, {0x4bb, 0x1, {0x1, 0x101}}, {0x1, 0x66d8, {0x1, 0x3ff}}, {0x9, 0x6, {0x0, 0xb2a}}, {0x8, 0x7, {0x2, 0x1}}, {0x3, 0x8001, {0x1, 0xe244}}, {0x5, 0x4, {0x2, 0x81}}, {0x0, 0x7, {0x3, 0x2}}, {0x200, 0x20, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x10001}, 0x2, 0x1f, 0xff, 0x9, 0x21, 'syz1\x00', "a705b89babab6dfa9e32db77bc20635fa3e6e06a6707847a749c95dde281ddd3", "6136742018f9e0a2903e65b3d7fbbfaf28a5db218c231747bc8d39b3e99cc91b", [{0x5, 0x7529, {0x2, 0xffff7fff}}, {0x8001, 0x1, {0x3, 0xfff}}, {0xbfc, 0x2, {0x3}}, {0xfff8, 0x0, {0x3, 0x8}}, {0x7, 0x1, {0x2, 0x4}}, {0x9, 0x8, {0x1}}, {0x1, 0x9, {0x2, 0x10000}}, {0x1, 0x4, {0x0, 0x97b5}}, {0x3, 0x6, {0x1, 0x1000}}, {0x1ff, 0x4, {0x1, 0x5}}, {0x6, 0x7f, {0x0, 0x4}}, {0x6, 0x200, {0x0, 0x8}}, {0xff, 0x7ff, {0x0, 0x7}}, {0x6, 0x0, {0x2, 0x1}}, {0xfff, 0x7ff, {0x3, 0x4}}, {0x8, 0x7fcb, {0x1, 0x6}}, {0xead, 0x8000, {0x2, 0x101}}, {0x80, 0xff, {0x2, 0x101}}, {0x7, 0x777, {0x0, 0xfffffffa}}, {0x3, 0x7, {0x1}}, {0x6, 0x75f6, {0x2, 0x9}}, {0x81, 0x1ff, {0x3, 0x6}}, {0x8001, 0xe93f, {0x0, 0x2}}, {0x401, 0x7f, {0x0, 0x3}}, {0x7ff, 0x3f, {0x2, 0x1}}, {0x6, 0x7f, {0x0, 0x10001}}, {0x1, 0x40, {0x0, 0x80000001}}, {0x1ff, 0xb62, {0x3, 0x8000}}, {0x81, 0x3, {0x0, 0x1}}, {0xc11d, 0x1, {0x2, 0x3ff}}, {0x1fb, 0x6, {0x3, 0x9}}, {0x47b, 0x3, {0x3, 0x4}}, {0x3, 0x0, {0x3, 0x3}}, {0x200, 0x294, {0x3, 0x1}}, {0x9, 0xfd0b, {0x1, 0xfff}}, {0x2, 0x3e75, {0x1, 0x6}}, {0x30, 0x4, {0x3, 0x6573}}, {0x9, 0x0, {0x2, 0x4}}, {0x8, 0x0, {0x2, 0x3}}, {0x5c, 0x3ff, {0x0, 0xc9c}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0xd9, 0x3, 0xfe01, 0x1f, 0x2, 'syz0\x00', "4124a1acdba91a2b60b109fe8bb97a05c7be8ddda573f04fadcf9351a800e4b4", "e822d259f11da6d077d8d8ea19ffca8dc3dff54ea37d487b510cc24c1a0979b2", [{0x9, 0x81, {0x3, 0x7f}}, {0x5, 0x4, {0x0, 0x8}}, {0x9, 0x2, {0x0, 0x74d}}, {0x6, 0x7f, {0x1, 0x5}}, {0x3, 0x9, {0x1, 0x7fffffff}}, {0x6, 0x1000, {0x3, 0x81}}, {0x1, 0x8, {0x1, 0x4}}, {0x4, 0x8, {0x2, 0xd59d}}, {0xf783, 0xf185, {0x3, 0x6}}, {0x1, 0x3, {0x3, 0x800}}, {0x8, 0x8001, {0x2, 0x5}}, {0x1129, 0x101, {0x1}}, {0x7, 0x3, {0x2, 0x5}}, {0x7, 0x0, {0x3, 0x100}}, {0x401, 0x5, {0x1, 0x4}}, {0x81, 0x4, {0x1, 0x5}}, {0x5, 0x800, {0x0, 0x2}}, {0x7f, 0xd, {0x3, 0x230}}, {0x4, 0x7, {0x1, 0x60}}, {0x8, 0x1000, {0x0, 0x2}}, {0x8000, 0x1, {0x3, 0x8}}, {0x44bb, 0x2, {0x1, 0x7fbf}}, {0x3, 0x5, {0x2, 0x3}}, {0x81, 0x6, {0x1, 0x2}}, {0x3f, 0x4b0, {0x1, 0x8}}, {0x8, 0x8, {0x2, 0x1}}, {0x9, 0xba54, {0x3, 0x401}}, {0x0, 0xef, {0x3, 0x7}}, {0x4, 0x6, {0x0, 0x1f}}, {0x5, 0x5, {0x3, 0x5}}, {0x6, 0x2, {0x3, 0x6}}, {0x5, 0x8000, {0x0, 0x8001}}, {0x8, 0x1, {0x3, 0x5}}, {0xbe, 0x1ba3, {0x2, 0x1}}, {0x4, 0x9, {0x2, 0x9}}, {0x4236, 0x0, {0x2, 0x6}}, {0x7, 0x1000, {0x3, 0x4}}, {0x996, 0x9, {0x1, 0x5b}}, {0x3ff, 0x8, {0x1, 0xffffffff}}, {0x7, 0x800, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x4, 0x40, 0x1, 0x9, 0xe, 'syz0\x00', "e438546755cbe33290ee799e9fba1dc36280a39dece7341a663ecd99dbdf4bca", "11b3643b75edc510ecfedc0c43b2b0d9a3dd1d127857de4ef8eeb5d19404987d", [{0x15, 0x20, {0x3}}, {0xff38, 0x9, {0x1, 0x5}}, {0x4f4, 0x1f, {0x2, 0x40}}, {0x56f, 0x1, {0x2, 0x1f}}, {0xdba, 0x31, {0x0, 0x6}}, {0x20, 0x3, {0x1, 0x8001}}, {0x5, 0x3, {0x1, 0x8}}, {0x1, 0x3, {0x2, 0x9}}, {0xfff, 0x9, {0x1, 0x1f}}, {0x20, 0x1000, {0x3, 0x5f}}, {0x7f, 0x800, {0x3, 0x964f}}, {0x1f, 0xb0, {0x0, 0xcb4}}, {0x0, 0xfffd, {0x1}}, {0x5, 0xcc, {0x3, 0x6}}, {0x0, 0xfff7, {0x3, 0x9}}, {0x4ac, 0x9, {0x0, 0x3}}, {0xef, 0x401, {0x3}}, {0x1, 0x1, {0x0, 0x32e9fcc1}}, {0x1, 0x4, {0x0, 0x8}}, {0x7, 0x100, {0x2, 0x1f}}, {0x1, 0x100, {0x0, 0x6}}, {0x101, 0xee8f, {0x2, 0x77266521}}, {0x6, 0x7, {0x1, 0x7f}}, {0xffc1, 0x2, {0x3, 0xff}}, {0x20, 0xd158, {0x3, 0x80000001}}, {0x20, 0x0, {0x1, 0x1}}, {0x60b, 0x0, {0x2, 0x3}}, {0x4, 0x2, {0x0, 0x8}}, {0x0, 0x3, {0x2, 0x5}}, {0x1, 0x1, {0x1, 0x8}}, {0x1, 0x2, {0x3, 0xff}}, {0x0, 0xfffb, {0x2, 0xe766}}, {0x0, 0x2b0, {0x2, 0x8}}, {0x2, 0x8, {0x2, 0xfffffffa}}, {0x200, 0x7, {0x2, 0x3f}}, {0x40, 0x5, {0x0, 0x5}}, {0xa983, 0x3, {0x1, 0x2}}, {0x5, 0x7, {0x0, 0x7}}, {0x739, 0x4, {0x2, 0x34}}, {0x5c5a, 0x1f, {0x3, 0x7f}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r7 = socket(0x29, 0xe, 0x43) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x177b52fde52ccb5}, 0x4080) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x54, r8, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x48}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x37}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x16db301d812be3c7) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x38, r8, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x48) 02:00:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socketpair(0x27, 0x1, 0x401, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb1c7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x90}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24044001}, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x10) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x420600, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r9, 0x320, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008805}, 0x4008001) socketpair(0xb, 0x80000, 0x7, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x78, r11, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xccc}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x64, r7, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x80) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3ff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x10000}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xbf1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfa6a}]}, 0x54}}, 0x8000) [ 55.187257] audit: type=1400 audit(1664762419.292:6): avc: denied { execmem } for pid=285 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:00:19 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_io_uring_complete(0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4eeceefc8e05182}, 0x40440c0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x5, 0x81, 0x3f, 0x0, 0x6, 0x4128, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x2380, 0x941, 0x3, 0x1, 0x0, 0x80000001, 0x7, 0x0, 0x10001, 0x0, 0x1000}, 0x0, 0xb, r0, 0x8) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x81, 0x8, 0x2, 0x0, 0xe9c5, 0x80, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x80a, 0x8, 0x9, 0x1, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x0, 0x1}, 0x0, 0x1, r1, 0x3) r2 = pidfd_open(0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x1, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x1840, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) r4 = syz_io_uring_complete(0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc01030}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, 0x1, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xa4}}, 0x20000005) pidfd_open(0xffffffffffffffff, 0x0) process_mrelease(r4, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x169003, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4d}]}, 0x2c}}, 0x0) 02:00:19 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x20010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x158, &(0x7f0000000000)=0x81, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000040)=0x1, 0x0, 0x4) r1 = syz_io_uring_complete(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff7}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2fb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4abf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8801}, 0x20010000) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = io_uring_setup(0x5308, &(0x7f0000000380)={0x0, 0x6953, 0x10, 0x0, 0x1e6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff0000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) syz_io_uring_submit(r0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r1, 0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x410102, 0x12345}, 0x1f) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2a5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x92}, 0x8000) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000007c0)=0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r4) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xa8, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffc}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xda4d}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcf48}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x800) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x7c, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x509}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x16}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x4c080) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000a, 0x11, r1, 0x10000000) syz_io_uring_submit(r0, r6, &(0x7f0000000c40)=@IORING_OP_STATX={0x15, 0x1, 0x0, r1, &(0x7f0000000b00), &(0x7f0000000c00)='./file1\x00', 0x80, 0x4000, 0x1}, 0x5) 02:00:19 executing program 7: sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x8050) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x52}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe4, r4, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x44881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x44060) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x1, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008100}, 0x24010011) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x42002}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200000c1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2f3c1ed6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r3) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000) [ 56.484674] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.487426] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.488749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.492752] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.494757] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.497477] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.503511] Bluetooth: hci0: HCI_REQ-0x0c1a [ 56.542737] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.545971] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.547519] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.550225] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.551570] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.552637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.555413] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 56.558926] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.560325] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.561542] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 56.563468] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.564763] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.565968] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 56.569322] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.577678] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.578803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.579868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.589780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.591201] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 56.592335] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.593464] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.599348] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.601058] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.606526] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 56.608374] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.609706] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.613288] Bluetooth: hci3: HCI_REQ-0x0c1a [ 56.614765] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 56.632155] Bluetooth: hci1: HCI_REQ-0x0c1a [ 56.637905] Bluetooth: hci5: HCI_REQ-0x0c1a [ 56.648095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.657207] Bluetooth: hci4: HCI_REQ-0x0c1a [ 56.663378] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.667042] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.679156] Bluetooth: hci2: HCI_REQ-0x0c1a [ 58.567455] Bluetooth: hci0: command 0x0409 tx timeout [ 58.631492] Bluetooth: hci3: command 0x0409 tx timeout [ 58.632476] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 58.633481] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 58.695575] Bluetooth: hci2: command 0x0409 tx timeout [ 58.696167] Bluetooth: hci4: command 0x0409 tx timeout [ 58.696641] Bluetooth: hci1: command 0x0409 tx timeout [ 58.697174] Bluetooth: hci5: command 0x0409 tx timeout [ 60.615099] Bluetooth: hci0: command 0x041b tx timeout [ 60.679109] Bluetooth: hci3: command 0x041b tx timeout [ 60.743600] Bluetooth: hci5: command 0x041b tx timeout [ 60.744466] Bluetooth: hci1: command 0x041b tx timeout [ 60.745329] Bluetooth: hci4: command 0x041b tx timeout [ 60.746163] Bluetooth: hci2: command 0x041b tx timeout [ 61.859575] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 61.865191] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 61.868965] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 61.872445] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 61.874284] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 61.883653] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 61.895612] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 61.898270] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 61.901955] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 61.908221] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 61.916731] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 61.928475] Bluetooth: hci7: HCI_REQ-0x0c1a [ 61.929431] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 61.977797] Bluetooth: hci6: HCI_REQ-0x0c1a [ 62.663147] Bluetooth: hci0: command 0x040f tx timeout [ 62.727063] Bluetooth: hci3: command 0x040f tx timeout [ 62.791401] Bluetooth: hci2: command 0x040f tx timeout [ 62.792212] Bluetooth: hci4: command 0x040f tx timeout [ 62.792942] Bluetooth: hci1: command 0x040f tx timeout [ 62.793940] Bluetooth: hci5: command 0x040f tx timeout [ 63.944119] Bluetooth: hci7: command 0x0409 tx timeout [ 64.007095] Bluetooth: hci6: command 0x0409 tx timeout [ 64.711047] Bluetooth: hci0: command 0x0419 tx timeout [ 64.775068] Bluetooth: hci3: command 0x0419 tx timeout [ 64.839275] Bluetooth: hci5: command 0x0419 tx timeout [ 64.839702] Bluetooth: hci1: command 0x0419 tx timeout [ 64.840476] Bluetooth: hci4: command 0x0419 tx timeout [ 64.840892] Bluetooth: hci2: command 0x0419 tx timeout [ 65.991143] Bluetooth: hci7: command 0x041b tx timeout [ 66.055092] Bluetooth: hci6: command 0x041b tx timeout [ 68.039089] Bluetooth: hci7: command 0x040f tx timeout [ 68.103036] Bluetooth: hci6: command 0x040f tx timeout [ 70.087039] Bluetooth: hci7: command 0x0419 tx timeout [ 70.151042] Bluetooth: hci6: command 0x0419 tx timeout 02:01:12 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) keyctl$negate(0xd, r0, 0x1, r0) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, r3) r4 = add_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540), 0x0, r3) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={r4, 0xbd, 0x13}, &(0x7f00000005c0)={'enc=', 'pkcs1', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f0000000640)="f077c074fe0280996d68618b5c1f1d3404b9b90a09c2af0faef2b06502f959c26035a0777eab4e622d9b282e0acc2c7f41bf6e4b5028c3a6dfee99856f43902edffdabcd711bc5d2e6d1f4430a3ac18b301afbe115636762fa092030f9f4bc06ed7857457b0cc3a7e23e39f26dfa5bfc58113379cbc0b94cb6b8e1fa066ed0592a9e3ea46f87626cc82fe7ee99f7033b96ef2f1e634a71c369991b941fb287a2ea969851b332b80bd2544739f02bf042ceb2646b5d7216ede2a41d6ca7", &(0x7f0000000700)=""/19) r5 = geteuid() keyctl$chown(0x4, r4, r5, r2) geteuid() keyctl$get_persistent(0x16, r5, r4) r6 = syz_io_uring_complete(0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x95) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040811}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, r6, 0x8000000) 02:01:12 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) keyctl$negate(0xd, r0, 0x1, r0) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, r3) r4 = add_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540), 0x0, r3) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={r4, 0xbd, 0x13}, &(0x7f00000005c0)={'enc=', 'pkcs1', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f0000000640)="f077c074fe0280996d68618b5c1f1d3404b9b90a09c2af0faef2b06502f959c26035a0777eab4e622d9b282e0acc2c7f41bf6e4b5028c3a6dfee99856f43902edffdabcd711bc5d2e6d1f4430a3ac18b301afbe115636762fa092030f9f4bc06ed7857457b0cc3a7e23e39f26dfa5bfc58113379cbc0b94cb6b8e1fa066ed0592a9e3ea46f87626cc82fe7ee99f7033b96ef2f1e634a71c369991b941fb287a2ea969851b332b80bd2544739f02bf042ceb2646b5d7216ede2a41d6ca7", &(0x7f0000000700)=""/19) r5 = geteuid() keyctl$chown(0x4, r4, r5, r2) geteuid() keyctl$get_persistent(0x16, r5, r4) r6 = syz_io_uring_complete(0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x95) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040811}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, r6, 0x8000000) 02:01:13 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) keyctl$negate(0xd, r0, 0x1, r0) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, r3) r4 = add_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540), 0x0, r3) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={r4, 0xbd, 0x13}, &(0x7f00000005c0)={'enc=', 'pkcs1', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f0000000640)="f077c074fe0280996d68618b5c1f1d3404b9b90a09c2af0faef2b06502f959c26035a0777eab4e622d9b282e0acc2c7f41bf6e4b5028c3a6dfee99856f43902edffdabcd711bc5d2e6d1f4430a3ac18b301afbe115636762fa092030f9f4bc06ed7857457b0cc3a7e23e39f26dfa5bfc58113379cbc0b94cb6b8e1fa066ed0592a9e3ea46f87626cc82fe7ee99f7033b96ef2f1e634a71c369991b941fb287a2ea969851b332b80bd2544739f02bf042ceb2646b5d7216ede2a41d6ca7", &(0x7f0000000700)=""/19) r5 = geteuid() keyctl$chown(0x4, r4, r5, r2) geteuid() keyctl$get_persistent(0x16, r5, r4) r6 = syz_io_uring_complete(0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x95) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x60, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040811}, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, r6, 0x8000000) 02:01:13 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) keyctl$negate(0xd, r0, 0x1, r0) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, r3) r4 = add_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540), 0x0, r3) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={r4, 0xbd, 0x13}, &(0x7f00000005c0)={'enc=', 'pkcs1', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f0000000640)="f077c074fe0280996d68618b5c1f1d3404b9b90a09c2af0faef2b06502f959c26035a0777eab4e622d9b282e0acc2c7f41bf6e4b5028c3a6dfee99856f43902edffdabcd711bc5d2e6d1f4430a3ac18b301afbe115636762fa092030f9f4bc06ed7857457b0cc3a7e23e39f26dfa5bfc58113379cbc0b94cb6b8e1fa066ed0592a9e3ea46f87626cc82fe7ee99f7033b96ef2f1e634a71c369991b941fb287a2ea969851b332b80bd2544739f02bf042ceb2646b5d7216ede2a41d6ca7", &(0x7f0000000700)=""/19) r5 = geteuid() keyctl$chown(0x4, r4, r5, r2) geteuid() keyctl$get_persistent(0x16, r5, r4) r6 = syz_io_uring_complete(0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x95) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, r6, 0x8000000) 02:01:13 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) keyctl$negate(0xd, r0, 0x1, r0) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, r3) r4 = add_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540), 0x0, r3) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={r4, 0xbd, 0x13}, &(0x7f00000005c0)={'enc=', 'pkcs1', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f0000000640)="f077c074fe0280996d68618b5c1f1d3404b9b90a09c2af0faef2b06502f959c26035a0777eab4e622d9b282e0acc2c7f41bf6e4b5028c3a6dfee99856f43902edffdabcd711bc5d2e6d1f4430a3ac18b301afbe115636762fa092030f9f4bc06ed7857457b0cc3a7e23e39f26dfa5bfc58113379cbc0b94cb6b8e1fa066ed0592a9e3ea46f87626cc82fe7ee99f7033b96ef2f1e634a71c369991b941fb287a2ea969851b332b80bd2544739f02bf042ceb2646b5d7216ede2a41d6ca7", &(0x7f0000000700)=""/19) r5 = geteuid() keyctl$chown(0x4, r4, r5, r2) geteuid() keyctl$get_persistent(0x16, r5, r4) r6 = syz_io_uring_complete(0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r7, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x95) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, r6, 0x8000000) [ 110.128776] audit: type=1400 audit(1664762474.233:7): avc: denied { open } for pid=3880 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 02:01:14 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) keyctl$negate(0xd, r0, 0x1, r0) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, r3) r4 = add_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540), 0x0, r3) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={r4, 0xbd, 0x13}, &(0x7f00000005c0)={'enc=', 'pkcs1', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f0000000640)="f077c074fe0280996d68618b5c1f1d3404b9b90a09c2af0faef2b06502f959c26035a0777eab4e622d9b282e0acc2c7f41bf6e4b5028c3a6dfee99856f43902edffdabcd711bc5d2e6d1f4430a3ac18b301afbe115636762fa092030f9f4bc06ed7857457b0cc3a7e23e39f26dfa5bfc58113379cbc0b94cb6b8e1fa066ed0592a9e3ea46f87626cc82fe7ee99f7033b96ef2f1e634a71c369991b941fb287a2ea969851b332b80bd2544739f02bf042ceb2646b5d7216ede2a41d6ca7", &(0x7f0000000700)=""/19) r5 = geteuid() keyctl$chown(0x4, r4, r5, r2) geteuid() keyctl$get_persistent(0x16, r5, r4) r6 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, r6, 0x8000000) 02:01:14 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_io_uring_complete(0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4eeceefc8e05182}, 0x40440c0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x5, 0x81, 0x3f, 0x0, 0x6, 0x4128, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x2380, 0x941, 0x3, 0x1, 0x0, 0x80000001, 0x7, 0x0, 0x10001, 0x0, 0x1000}, 0x0, 0xb, r0, 0x8) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x81, 0x8, 0x2, 0x0, 0xe9c5, 0x80, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x80a, 0x8, 0x9, 0x1, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x0, 0x1}, 0x0, 0x1, r1, 0x3) r2 = pidfd_open(0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x1, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x1840, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) r4 = syz_io_uring_complete(0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc01030}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, 0x1, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xa4}}, 0x20000005) pidfd_open(0xffffffffffffffff, 0x0) process_mrelease(r4, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x169003, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4d}]}, 0x2c}}, 0x0) 02:01:14 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_io_uring_complete(0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4eeceefc8e05182}, 0x40440c0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x5, 0x81, 0x3f, 0x0, 0x6, 0x4128, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x2380, 0x941, 0x3, 0x1, 0x0, 0x80000001, 0x7, 0x0, 0x10001, 0x0, 0x1000}, 0x0, 0xb, r0, 0x8) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x81, 0x8, 0x2, 0x0, 0xe9c5, 0x80, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x80a, 0x8, 0x9, 0x1, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x0, 0x1}, 0x0, 0x1, r1, 0x3) r2 = pidfd_open(0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x1, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x1840, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) r4 = syz_io_uring_complete(0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc01030}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, 0x1, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xa4}}, 0x20000005) pidfd_open(0xffffffffffffffff, 0x0) process_mrelease(r4, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x169003, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4d}]}, 0x2c}}, 0x0) 02:01:36 executing program 0: r0 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000009, 0x50, 0xffffffffffffffff, 0x10000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r1, 0x8, 0x0, 0xb8a0, 0x4, 0x1}, 0x9) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x8040) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x55a}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20001850}, 0xc0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x101, 0x0) io_uring_setup(0x36b6, &(0x7f00000004c0)={0x0, 0x406e, 0x10, 0x1, 0x103, 0x0, r4}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x6ba47bd7fccb6eb5}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe8, r6, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x479}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3d}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40840}, 0x4000010) get_mempolicy(&(0x7f0000000780), &(0x7f00000007c0), 0x9, &(0x7f0000ffc000/0x4000)=nil, 0x2) get_mempolicy(&(0x7f0000000800), &(0x7f0000000840), 0x6, &(0x7f0000ffb000/0x4000)=nil, 0x5) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r8, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x627}]}, 0x38}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r9, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0xa0220000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r6, 0x2, 0x38, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x88) 02:01:36 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x20010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x158, &(0x7f0000000000)=0x81, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000040)=0x1, 0x0, 0x4) r1 = syz_io_uring_complete(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff7}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2fb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4abf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8801}, 0x20010000) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = io_uring_setup(0x5308, &(0x7f0000000380)={0x0, 0x6953, 0x10, 0x0, 0x1e6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff0000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) syz_io_uring_submit(r0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r1, 0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x410102, 0x12345}, 0x1f) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2a5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x92}, 0x8000) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000007c0)=0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r4) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xa8, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffc}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xda4d}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcf48}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x800) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x7c, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x509}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x16}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x4c080) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000a, 0x11, r1, 0x10000000) syz_io_uring_submit(r0, r6, &(0x7f0000000c40)=@IORING_OP_STATX={0x15, 0x1, 0x0, r1, &(0x7f0000000b00), &(0x7f0000000c00)='./file1\x00', 0x80, 0x4000, 0x1}, 0x5) 02:01:36 executing program 7: sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x8050) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x52}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe4, r4, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x44881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x44060) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x1, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008100}, 0x24010011) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x42002}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200000c1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2f3c1ed6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r3) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000) 02:01:36 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) keyctl$negate(0xd, r0, 0x1, r0) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, r3) r4 = add_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540), 0x0, r3) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={r4, 0xbd, 0x13}, &(0x7f00000005c0)={'enc=', 'pkcs1', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f0000000640)="f077c074fe0280996d68618b5c1f1d3404b9b90a09c2af0faef2b06502f959c26035a0777eab4e622d9b282e0acc2c7f41bf6e4b5028c3a6dfee99856f43902edffdabcd711bc5d2e6d1f4430a3ac18b301afbe115636762fa092030f9f4bc06ed7857457b0cc3a7e23e39f26dfa5bfc58113379cbc0b94cb6b8e1fa066ed0592a9e3ea46f87626cc82fe7ee99f7033b96ef2f1e634a71c369991b941fb287a2ea969851b332b80bd2544739f02bf042ceb2646b5d7216ede2a41d6ca7", &(0x7f0000000700)=""/19) r5 = geteuid() keyctl$chown(0x4, r4, r5, r2) geteuid() keyctl$get_persistent(0x16, r5, r4) r6 = syz_io_uring_complete(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, r6, 0x8000000) 02:01:36 executing program 3: socket$packet(0x11, 0x2, 0x300) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x200c4}, 0x80) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4044004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048054}, 0x40) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x100, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x24}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0xc}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x2001}, 0x8840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) socketpair(0x23, 0x6, 0x5, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x0, 0x12c, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) socketpair(0x1a, 0x1, 0x9, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044090}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x3, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x800) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001640)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000000a40)={0xbb8, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x8}, 0xbc, 0x3f, 0x4, 0x800, 0x18, 'syz0\x00', "cc0cc613c39b68fcb43bf5e8713278d025a25c2c2a8206cda67bfd20f2223a87", "40c78e6340b8ef1e4584c96b0b66b5e0b93d50579004c88027b79af60de4910e", [{0x3ff, 0x1, {0x2, 0x76a903df}}, {0x3, 0x7ff, {0x2}}, {0x9, 0x400, {0x1, 0x8}}, {0x80, 0xedb, {0x3, 0x3}}, {0x3, 0x9, {0x2, 0x4}}, {0x4, 0x81, {0x2, 0x38a1}}, {0x5, 0x7, {0x2, 0xffffffe0}}, {0x3ff, 0x67, {0x0, 0xe0c}}, {0xfff, 0x6, {0x1, 0xfffffff9}}, {0xfffb, 0x401, {0x1, 0x81}}, {0x8000, 0x7, {0x3, 0x2}}, {0x80, 0xfffa, {0x0, 0x66}}, {0x3ff, 0x44f, {0x1, 0x100}}, {0x6c23, 0x2, {0x1, 0x2}}, {0x7, 0x8000, {0x1, 0x3}}, {0x9, 0x0, {0x3, 0xd6}}, {0x200, 0x0, {0x8055bb359099c487, 0x8}}, {0xb80, 0xe2c, {0x3, 0x97}}, {0x3, 0x3, {0x1, 0x5}}, {0xfff, 0x8b, {0x3, 0x93}}, {0x3ff, 0x3, {0x2, 0x7}}, {0x7, 0xffff, {0x2, 0x6}}, {0x3, 0x4, {0x3, 0xffffff94}}, {0x7, 0x2, {0x1, 0x3}}, {0x9, 0x4, {0x2, 0x3}}, {0xfff, 0x4, {0x0, 0x1}}, {0xfffd, 0xffff, {0x1, 0xfffffffa}}, {0x7bba, 0x1f, {0x2, 0x9}}, {0x5ac, 0xfffa, {0x2, 0x800}}, {0x7, 0x0, {0x1, 0x5}}, {0x1000, 0x2, {0x3, 0x5}}, {0x6, 0x3, {0x1, 0x81}}, {0x0, 0x4, {0x1, 0xef6d}}, {0x1, 0x1, {0x2, 0x10000}}, {0x3f, 0x81, {0x0, 0x2}}, {0x2, 0x8966, {0x2, 0x9}}, {0x5, 0x40, {0x3, 0x8000}}, {0x101, 0x8000, {0x1, 0xfffffffe}}, {0x6, 0x9, {0x3, 0x2}}, {0x3, 0x7, {0x0, 0x101}}]}}}, {{0x254, 0x1, {{0x2, 0x64a}, 0xff, 0x7f, 0x2, 0xc92, 0xd, 'syz0\x00', "5c860f3c6791e89ff06f5ac820d6fc492a04fbb5ed2480429a70d9c2f272af2f", "775a84e47f380815c66a0cd56030c9f30808a922a5754aeca93bf353625a71a4", [{0x2, 0x2, {0x2, 0x3ff}}, {0x5, 0x7, {0x3, 0xffffffe0}}, {0x0, 0x7f, {0x1, 0x5}}, {0x68, 0xfffb, {0x0, 0x400}}, {0x200, 0xff81, {0x2, 0x1ff}}, {0x81, 0x6}, {0x1000, 0x7, {0x2, 0x8}}, {0x7fff, 0x7, {0x1}}, {0x5, 0x584a, {0x2, 0x5}}, {0x6, 0x401, {0x3}}, {0x1f, 0x101}, {0x0, 0x3, {0x0, 0x8}}, {0x0, 0x80, {0x1, 0xfffffff7}}, {0x567, 0x60, {0x0, 0x1f}}, {0xffff, 0x8000, {0x1, 0xe24}}, {0x130, 0x3}, {0x8, 0xe4, {0x1, 0x7}}, {0x80, 0x6, {0x3, 0x3f}}, {0xffff, 0x0, {0x1, 0x6}}, {0x6, 0x1, {0x3, 0x1}}, {0x5, 0x6, {0x3, 0xffff}}, {0x7, 0x800, {0x1, 0x5}}, {0x7ff, 0x7fff, {0x2, 0x7}}, {0x57b3, 0x7, {0x3, 0x6b69}}, {0x1, 0xfff, {0x2, 0x20d1}}, {0x3f, 0x3, {0x2, 0x3}}, {0xe25c, 0x7ff, {0x1, 0x400}}, {0x6, 0x9, {0x0, 0x10000}}, {0xb4, 0x8001, {0x3, 0x1}}, {0x2, 0x0, {0x2}}, {0x401, 0x20, {0x3, 0x6d51}}, {0x2, 0x0, {0x2, 0x4}}, {0x4bb, 0x1, {0x1, 0x101}}, {0x1, 0x66d8, {0x1, 0x3ff}}, {0x9, 0x6, {0x0, 0xb2a}}, {0x8, 0x7, {0x2, 0x1}}, {0x3, 0x8001, {0x1, 0xe244}}, {0x5, 0x4, {0x2, 0x81}}, {0x0, 0x7, {0x3, 0x2}}, {0x200, 0x20, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x10001}, 0x2, 0x1f, 0xff, 0x9, 0x21, 'syz1\x00', "a705b89babab6dfa9e32db77bc20635fa3e6e06a6707847a749c95dde281ddd3", "6136742018f9e0a2903e65b3d7fbbfaf28a5db218c231747bc8d39b3e99cc91b", [{0x5, 0x7529, {0x2, 0xffff7fff}}, {0x8001, 0x1, {0x3, 0xfff}}, {0xbfc, 0x2, {0x3}}, {0xfff8, 0x0, {0x3, 0x8}}, {0x7, 0x1, {0x2, 0x4}}, {0x9, 0x8, {0x1}}, {0x1, 0x9, {0x2, 0x10000}}, {0x1, 0x4, {0x0, 0x97b5}}, {0x3, 0x6, {0x1, 0x1000}}, {0x1ff, 0x4, {0x1, 0x5}}, {0x6, 0x7f, {0x0, 0x4}}, {0x6, 0x200, {0x0, 0x8}}, {0xff, 0x7ff, {0x0, 0x7}}, {0x6, 0x0, {0x2, 0x1}}, {0xfff, 0x7ff, {0x3, 0x4}}, {0x8, 0x7fcb, {0x1, 0x6}}, {0xead, 0x8000, {0x2, 0x101}}, {0x80, 0xff, {0x2, 0x101}}, {0x7, 0x777, {0x0, 0xfffffffa}}, {0x3, 0x7, {0x1}}, {0x6, 0x75f6, {0x2, 0x9}}, {0x81, 0x1ff, {0x3, 0x6}}, {0x8001, 0xe93f, {0x0, 0x2}}, {0x401, 0x7f, {0x0, 0x3}}, {0x7ff, 0x3f, {0x2, 0x1}}, {0x6, 0x7f, {0x0, 0x10001}}, {0x1, 0x40, {0x0, 0x80000001}}, {0x1ff, 0xb62, {0x3, 0x8000}}, {0x81, 0x3, {0x0, 0x1}}, {0xc11d, 0x1, {0x2, 0x3ff}}, {0x1fb, 0x6, {0x3, 0x9}}, {0x47b, 0x3, {0x3, 0x4}}, {0x3, 0x0, {0x3, 0x3}}, {0x200, 0x294, {0x3, 0x1}}, {0x9, 0xfd0b, {0x1, 0xfff}}, {0x2, 0x3e75, {0x1, 0x6}}, {0x30, 0x4, {0x3, 0x6573}}, {0x9, 0x0, {0x2, 0x4}}, {0x8, 0x0, {0x2, 0x3}}, {0x5c, 0x3ff, {0x0, 0xc9c}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0xd9, 0x3, 0xfe01, 0x1f, 0x2, 'syz0\x00', "4124a1acdba91a2b60b109fe8bb97a05c7be8ddda573f04fadcf9351a800e4b4", "e822d259f11da6d077d8d8ea19ffca8dc3dff54ea37d487b510cc24c1a0979b2", [{0x9, 0x81, {0x3, 0x7f}}, {0x5, 0x4, {0x0, 0x8}}, {0x9, 0x2, {0x0, 0x74d}}, {0x6, 0x7f, {0x1, 0x5}}, {0x3, 0x9, {0x1, 0x7fffffff}}, {0x6, 0x1000, {0x3, 0x81}}, {0x1, 0x8, {0x1, 0x4}}, {0x4, 0x8, {0x2, 0xd59d}}, {0xf783, 0xf185, {0x3, 0x6}}, {0x1, 0x3, {0x3, 0x800}}, {0x8, 0x8001, {0x2, 0x5}}, {0x1129, 0x101, {0x1}}, {0x7, 0x3, {0x2, 0x5}}, {0x7, 0x0, {0x3, 0x100}}, {0x401, 0x5, {0x1, 0x4}}, {0x81, 0x4, {0x1, 0x5}}, {0x5, 0x800, {0x0, 0x2}}, {0x7f, 0xd, {0x3, 0x230}}, {0x4, 0x7, {0x1, 0x60}}, {0x8, 0x1000, {0x0, 0x2}}, {0x8000, 0x1, {0x3, 0x8}}, {0x44bb, 0x2, {0x1, 0x7fbf}}, {0x3, 0x5, {0x2, 0x3}}, {0x81, 0x6, {0x1, 0x2}}, {0x3f, 0x4b0, {0x1, 0x8}}, {0x8, 0x8, {0x2, 0x1}}, {0x9, 0xba54, {0x3, 0x401}}, {0x0, 0xef, {0x3, 0x7}}, {0x4, 0x6, {0x0, 0x1f}}, {0x5, 0x5, {0x3, 0x5}}, {0x6, 0x2, {0x3, 0x6}}, {0x5, 0x8000, {0x0, 0x8001}}, {0x8, 0x1, {0x3, 0x5}}, {0xbe, 0x1ba3, {0x2, 0x1}}, {0x4, 0x9, {0x2, 0x9}}, {0x4236, 0x0, {0x2, 0x6}}, {0x7, 0x1000, {0x3, 0x4}}, {0x996, 0x9, {0x1, 0x5b}}, {0x3ff, 0x8, {0x1, 0xffffffff}}, {0x7, 0x800, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x4, 0x40, 0x1, 0x9, 0xe, 'syz0\x00', "e438546755cbe33290ee799e9fba1dc36280a39dece7341a663ecd99dbdf4bca", "11b3643b75edc510ecfedc0c43b2b0d9a3dd1d127857de4ef8eeb5d19404987d", [{0x15, 0x20, {0x3}}, {0xff38, 0x9, {0x1, 0x5}}, {0x4f4, 0x1f, {0x2, 0x40}}, {0x56f, 0x1, {0x2, 0x1f}}, {0xdba, 0x31, {0x0, 0x6}}, {0x20, 0x3, {0x1, 0x8001}}, {0x5, 0x3, {0x1, 0x8}}, {0x1, 0x3, {0x2, 0x9}}, {0xfff, 0x9, {0x1, 0x1f}}, {0x20, 0x1000, {0x3, 0x5f}}, {0x7f, 0x800, {0x3, 0x964f}}, {0x1f, 0xb0, {0x0, 0xcb4}}, {0x0, 0xfffd, {0x1}}, {0x5, 0xcc, {0x3, 0x6}}, {0x0, 0xfff7, {0x3, 0x9}}, {0x4ac, 0x9, {0x0, 0x3}}, {0xef, 0x401, {0x3}}, {0x1, 0x1, {0x0, 0x32e9fcc1}}, {0x1, 0x4, {0x0, 0x8}}, {0x7, 0x100, {0x2, 0x1f}}, {0x1, 0x100, {0x0, 0x6}}, {0x101, 0xee8f, {0x2, 0x77266521}}, {0x6, 0x7, {0x1, 0x7f}}, {0xffc1, 0x2, {0x3, 0xff}}, {0x20, 0xd158, {0x3, 0x80000001}}, {0x20, 0x0, {0x1, 0x1}}, {0x60b, 0x0, {0x2, 0x3}}, {0x4, 0x2, {0x0, 0x8}}, {0x0, 0x3, {0x2, 0x5}}, {0x1, 0x1, {0x1, 0x8}}, {0x1, 0x2, {0x3, 0xff}}, {0x0, 0xfffb, {0x2, 0xe766}}, {0x0, 0x2b0, {0x2, 0x8}}, {0x2, 0x8, {0x2, 0xfffffffa}}, {0x200, 0x7, {0x2, 0x3f}}, {0x40, 0x5, {0x0, 0x5}}, {0xa983, 0x3, {0x1, 0x2}}, {0x5, 0x7, {0x0, 0x7}}, {0x739, 0x4, {0x2, 0x34}}, {0x5c5a, 0x1f, {0x3, 0x7f}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r7 = socket(0x29, 0xe, 0x43) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x177b52fde52ccb5}, 0x4080) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x54, r8, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x48}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x37}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x16db301d812be3c7) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x38, r8, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x48) 02:01:36 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_io_uring_complete(0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4eeceefc8e05182}, 0x40440c0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x5, 0x81, 0x3f, 0x0, 0x6, 0x4128, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x2380, 0x941, 0x3, 0x1, 0x0, 0x80000001, 0x7, 0x0, 0x10001, 0x0, 0x1000}, 0x0, 0xb, r0, 0x8) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x81, 0x8, 0x2, 0x0, 0xe9c5, 0x80, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x80a, 0x8, 0x9, 0x1, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x0, 0x1}, 0x0, 0x1, r1, 0x3) r2 = pidfd_open(0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x1, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x1840, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) r4 = syz_io_uring_complete(0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc01030}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, 0x1, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xa4}}, 0x20000005) pidfd_open(0xffffffffffffffff, 0x0) process_mrelease(r4, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x169003, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4d}]}, 0x2c}}, 0x0) 02:01:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socketpair(0x27, 0x1, 0x401, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb1c7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x90}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24044001}, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x10) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x420600, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r9, 0x320, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008805}, 0x4008001) socketpair(0xb, 0x80000, 0x7, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x78, r11, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xccc}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x64, r7, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x80) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3ff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x10000}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xbf1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfa6a}]}, 0x54}}, 0x8000) 02:01:36 executing program 1: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5a000100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040880}, 0x20008000) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80010440}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x5, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x20008800) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "9b4870ec3767fb1feecabdd05c3917ee"}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x154, 0x0, 0x10, 0x70bd2c, 0xfff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x410}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb8}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6da}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x62b}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3240}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xba}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xdad}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0xc801}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4008800) r3 = socket(0x15, 0x6, 0x8) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="37d2cd6a46e7"}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40002) r4 = syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xbaa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x3c}}, 0x110) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7f}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40400d5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000f40)={&(0x7f0000000e00), 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) 02:01:36 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) keyctl$negate(0xd, r0, 0x1, r0) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, r3) r4 = add_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540), 0x0, r3) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={r4, 0xbd, 0x13}, &(0x7f00000005c0)={'enc=', 'pkcs1', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f0000000640)="f077c074fe0280996d68618b5c1f1d3404b9b90a09c2af0faef2b06502f959c26035a0777eab4e622d9b282e0acc2c7f41bf6e4b5028c3a6dfee99856f43902edffdabcd711bc5d2e6d1f4430a3ac18b301afbe115636762fa092030f9f4bc06ed7857457b0cc3a7e23e39f26dfa5bfc58113379cbc0b94cb6b8e1fa066ed0592a9e3ea46f87626cc82fe7ee99f7033b96ef2f1e634a71c369991b941fb287a2ea969851b332b80bd2544739f02bf042ceb2646b5d7216ede2a41d6ca7", &(0x7f0000000700)=""/19) r5 = geteuid() keyctl$chown(0x4, r4, r5, r2) geteuid() keyctl$get_persistent(0x16, r5, r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, 0xffffffffffffffff, 0x8000000) 02:01:36 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_io_uring_complete(0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4eeceefc8e05182}, 0x40440c0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x5, 0x81, 0x3f, 0x0, 0x6, 0x4128, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x2380, 0x941, 0x3, 0x1, 0x0, 0x80000001, 0x7, 0x0, 0x10001, 0x0, 0x1000}, 0x0, 0xb, r0, 0x8) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x81, 0x8, 0x2, 0x0, 0xe9c5, 0x80, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x80a, 0x8, 0x9, 0x1, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x0, 0x1}, 0x0, 0x1, r1, 0x3) r2 = pidfd_open(0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x1, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x1840, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) r4 = syz_io_uring_complete(0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc01030}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, 0x1, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xa4}}, 0x20000005) pidfd_open(0xffffffffffffffff, 0x0) process_mrelease(r4, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x169003, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4d}]}, 0x2c}}, 0x0) 02:01:36 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) keyctl$negate(0xd, r0, 0x1, r0) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, r3) r4 = add_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540), 0x0, r3) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={r4, 0xbd, 0x13}, &(0x7f00000005c0)={'enc=', 'pkcs1', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f0000000640)="f077c074fe0280996d68618b5c1f1d3404b9b90a09c2af0faef2b06502f959c26035a0777eab4e622d9b282e0acc2c7f41bf6e4b5028c3a6dfee99856f43902edffdabcd711bc5d2e6d1f4430a3ac18b301afbe115636762fa092030f9f4bc06ed7857457b0cc3a7e23e39f26dfa5bfc58113379cbc0b94cb6b8e1fa066ed0592a9e3ea46f87626cc82fe7ee99f7033b96ef2f1e634a71c369991b941fb287a2ea969851b332b80bd2544739f02bf042ceb2646b5d7216ede2a41d6ca7", &(0x7f0000000700)=""/19) r5 = geteuid() keyctl$chown(0x4, r4, r5, r2) geteuid() mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, 0xffffffffffffffff, 0x8000000) 02:01:36 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_io_uring_complete(0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4eeceefc8e05182}, 0x40440c0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x5, 0x81, 0x3f, 0x0, 0x6, 0x4128, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x2380, 0x941, 0x3, 0x1, 0x0, 0x80000001, 0x7, 0x0, 0x10001, 0x0, 0x1000}, 0x0, 0xb, r0, 0x8) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x81, 0x8, 0x2, 0x0, 0xe9c5, 0x80, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x80a, 0x8, 0x9, 0x1, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x0, 0x1}, 0x0, 0x1, r1, 0x3) r2 = pidfd_open(0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x1, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x1840, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) r4 = syz_io_uring_complete(0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc01030}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, 0x1, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xa4}}, 0x20000005) pidfd_open(0xffffffffffffffff, 0x0) process_mrelease(r4, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x169003, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4d}]}, 0x2c}}, 0x0) 02:01:36 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x20010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x158, &(0x7f0000000000)=0x81, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000040)=0x1, 0x0, 0x4) r1 = syz_io_uring_complete(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff7}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2fb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4abf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8801}, 0x20010000) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = io_uring_setup(0x5308, &(0x7f0000000380)={0x0, 0x6953, 0x10, 0x0, 0x1e6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff0000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) syz_io_uring_submit(r0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r1, 0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x410102, 0x12345}, 0x1f) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2a5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x92}, 0x8000) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000007c0)=0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r4) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xa8, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffc}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xda4d}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcf48}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x800) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x7c, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x509}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x16}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x4c080) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000a, 0x11, r1, 0x10000000) syz_io_uring_submit(r0, r6, &(0x7f0000000c40)=@IORING_OP_STATX={0x15, 0x1, 0x0, r1, &(0x7f0000000b00), &(0x7f0000000c00)='./file1\x00', 0x80, 0x4000, 0x1}, 0x5) 02:01:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socketpair(0x27, 0x1, 0x401, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb1c7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x90}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24044001}, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x10) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x420600, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r9, 0x320, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008805}, 0x4008001) socketpair(0xb, 0x80000, 0x7, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x78, r11, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xccc}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x64, r7, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x80) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3ff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x10000}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xbf1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfa6a}]}, 0x54}}, 0x8000) 02:01:51 executing program 0: r0 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000009, 0x50, 0xffffffffffffffff, 0x10000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r1, 0x8, 0x0, 0xb8a0, 0x4, 0x1}, 0x9) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x8040) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x55a}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20001850}, 0xc0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x101, 0x0) io_uring_setup(0x36b6, &(0x7f00000004c0)={0x0, 0x406e, 0x10, 0x1, 0x103, 0x0, r4}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x6ba47bd7fccb6eb5}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe8, r6, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x479}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3d}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40840}, 0x4000010) get_mempolicy(&(0x7f0000000780), &(0x7f00000007c0), 0x9, &(0x7f0000ffc000/0x4000)=nil, 0x2) get_mempolicy(&(0x7f0000000800), &(0x7f0000000840), 0x6, &(0x7f0000ffb000/0x4000)=nil, 0x5) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r8, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x627}]}, 0x38}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r9, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0xa0220000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r6, 0x2, 0x38, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x88) 02:01:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socketpair(0x27, 0x1, 0x401, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb1c7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x90}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24044001}, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x10) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x420600, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r9, 0x320, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008805}, 0x4008001) socketpair(0xb, 0x80000, 0x7, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x78, r11, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xccc}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x64, r7, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x80) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3ff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x10000}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xbf1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfa6a}]}, 0x54}}, 0x8000) 02:01:51 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_io_uring_complete(0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4eeceefc8e05182}, 0x40440c0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x5, 0x81, 0x3f, 0x0, 0x6, 0x4128, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x2380, 0x941, 0x3, 0x1, 0x0, 0x80000001, 0x7, 0x0, 0x10001, 0x0, 0x1000}, 0x0, 0xb, r0, 0x8) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x81, 0x8, 0x2, 0x0, 0xe9c5, 0x80, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x80a, 0x8, 0x9, 0x1, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x0, 0x1}, 0x0, 0x1, r1, 0x3) r2 = pidfd_open(0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x1, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x1840, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) r4 = syz_io_uring_complete(0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc01030}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, 0x1, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xa4}}, 0x20000005) pidfd_open(0xffffffffffffffff, 0x0) process_mrelease(r4, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x169003, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4d}]}, 0x2c}}, 0x0) 02:01:51 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x20010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x158, &(0x7f0000000000)=0x81, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000040)=0x1, 0x0, 0x4) r1 = syz_io_uring_complete(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff7}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2fb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4abf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8801}, 0x20010000) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = io_uring_setup(0x5308, &(0x7f0000000380)={0x0, 0x6953, 0x10, 0x0, 0x1e6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff0000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) syz_io_uring_submit(r0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r1, 0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x410102, 0x12345}, 0x1f) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2a5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x92}, 0x8000) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000007c0)=0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r4) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xa8, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffc}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xda4d}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcf48}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x800) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x7c, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x509}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x16}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x4c080) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000a, 0x11, r1, 0x10000000) syz_io_uring_submit(r0, r6, &(0x7f0000000c40)=@IORING_OP_STATX={0x15, 0x1, 0x0, r1, &(0x7f0000000b00), &(0x7f0000000c00)='./file1\x00', 0x80, 0x4000, 0x1}, 0x5) 02:01:51 executing program 3: socket$packet(0x11, 0x2, 0x300) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x200c4}, 0x80) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4044004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048054}, 0x40) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x100, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x24}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0xc}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x2001}, 0x8840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) socketpair(0x23, 0x6, 0x5, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x0, 0x12c, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) socketpair(0x1a, 0x1, 0x9, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044090}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x3, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x800) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001640)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000000a40)={0xbb8, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x8}, 0xbc, 0x3f, 0x4, 0x800, 0x18, 'syz0\x00', "cc0cc613c39b68fcb43bf5e8713278d025a25c2c2a8206cda67bfd20f2223a87", "40c78e6340b8ef1e4584c96b0b66b5e0b93d50579004c88027b79af60de4910e", [{0x3ff, 0x1, {0x2, 0x76a903df}}, {0x3, 0x7ff, {0x2}}, {0x9, 0x400, {0x1, 0x8}}, {0x80, 0xedb, {0x3, 0x3}}, {0x3, 0x9, {0x2, 0x4}}, {0x4, 0x81, {0x2, 0x38a1}}, {0x5, 0x7, {0x2, 0xffffffe0}}, {0x3ff, 0x67, {0x0, 0xe0c}}, {0xfff, 0x6, {0x1, 0xfffffff9}}, {0xfffb, 0x401, {0x1, 0x81}}, {0x8000, 0x7, {0x3, 0x2}}, {0x80, 0xfffa, {0x0, 0x66}}, {0x3ff, 0x44f, {0x1, 0x100}}, {0x6c23, 0x2, {0x1, 0x2}}, {0x7, 0x8000, {0x1, 0x3}}, {0x9, 0x0, {0x3, 0xd6}}, {0x200, 0x0, {0x8055bb359099c487, 0x8}}, {0xb80, 0xe2c, {0x3, 0x97}}, {0x3, 0x3, {0x1, 0x5}}, {0xfff, 0x8b, {0x3, 0x93}}, {0x3ff, 0x3, {0x2, 0x7}}, {0x7, 0xffff, {0x2, 0x6}}, {0x3, 0x4, {0x3, 0xffffff94}}, {0x7, 0x2, {0x1, 0x3}}, {0x9, 0x4, {0x2, 0x3}}, {0xfff, 0x4, {0x0, 0x1}}, {0xfffd, 0xffff, {0x1, 0xfffffffa}}, {0x7bba, 0x1f, {0x2, 0x9}}, {0x5ac, 0xfffa, {0x2, 0x800}}, {0x7, 0x0, {0x1, 0x5}}, {0x1000, 0x2, {0x3, 0x5}}, {0x6, 0x3, {0x1, 0x81}}, {0x0, 0x4, {0x1, 0xef6d}}, {0x1, 0x1, {0x2, 0x10000}}, {0x3f, 0x81, {0x0, 0x2}}, {0x2, 0x8966, {0x2, 0x9}}, {0x5, 0x40, {0x3, 0x8000}}, {0x101, 0x8000, {0x1, 0xfffffffe}}, {0x6, 0x9, {0x3, 0x2}}, {0x3, 0x7, {0x0, 0x101}}]}}}, {{0x254, 0x1, {{0x2, 0x64a}, 0xff, 0x7f, 0x2, 0xc92, 0xd, 'syz0\x00', "5c860f3c6791e89ff06f5ac820d6fc492a04fbb5ed2480429a70d9c2f272af2f", "775a84e47f380815c66a0cd56030c9f30808a922a5754aeca93bf353625a71a4", [{0x2, 0x2, {0x2, 0x3ff}}, {0x5, 0x7, {0x3, 0xffffffe0}}, {0x0, 0x7f, {0x1, 0x5}}, {0x68, 0xfffb, {0x0, 0x400}}, {0x200, 0xff81, {0x2, 0x1ff}}, {0x81, 0x6}, {0x1000, 0x7, {0x2, 0x8}}, {0x7fff, 0x7, {0x1}}, {0x5, 0x584a, {0x2, 0x5}}, {0x6, 0x401, {0x3}}, {0x1f, 0x101}, {0x0, 0x3, {0x0, 0x8}}, {0x0, 0x80, {0x1, 0xfffffff7}}, {0x567, 0x60, {0x0, 0x1f}}, {0xffff, 0x8000, {0x1, 0xe24}}, {0x130, 0x3}, {0x8, 0xe4, {0x1, 0x7}}, {0x80, 0x6, {0x3, 0x3f}}, {0xffff, 0x0, {0x1, 0x6}}, {0x6, 0x1, {0x3, 0x1}}, {0x5, 0x6, {0x3, 0xffff}}, {0x7, 0x800, {0x1, 0x5}}, {0x7ff, 0x7fff, {0x2, 0x7}}, {0x57b3, 0x7, {0x3, 0x6b69}}, {0x1, 0xfff, {0x2, 0x20d1}}, {0x3f, 0x3, {0x2, 0x3}}, {0xe25c, 0x7ff, {0x1, 0x400}}, {0x6, 0x9, {0x0, 0x10000}}, {0xb4, 0x8001, {0x3, 0x1}}, {0x2, 0x0, {0x2}}, {0x401, 0x20, {0x3, 0x6d51}}, {0x2, 0x0, {0x2, 0x4}}, {0x4bb, 0x1, {0x1, 0x101}}, {0x1, 0x66d8, {0x1, 0x3ff}}, {0x9, 0x6, {0x0, 0xb2a}}, {0x8, 0x7, {0x2, 0x1}}, {0x3, 0x8001, {0x1, 0xe244}}, {0x5, 0x4, {0x2, 0x81}}, {0x0, 0x7, {0x3, 0x2}}, {0x200, 0x20, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x10001}, 0x2, 0x1f, 0xff, 0x9, 0x21, 'syz1\x00', "a705b89babab6dfa9e32db77bc20635fa3e6e06a6707847a749c95dde281ddd3", "6136742018f9e0a2903e65b3d7fbbfaf28a5db218c231747bc8d39b3e99cc91b", [{0x5, 0x7529, {0x2, 0xffff7fff}}, {0x8001, 0x1, {0x3, 0xfff}}, {0xbfc, 0x2, {0x3}}, {0xfff8, 0x0, {0x3, 0x8}}, {0x7, 0x1, {0x2, 0x4}}, {0x9, 0x8, {0x1}}, {0x1, 0x9, {0x2, 0x10000}}, {0x1, 0x4, {0x0, 0x97b5}}, {0x3, 0x6, {0x1, 0x1000}}, {0x1ff, 0x4, {0x1, 0x5}}, {0x6, 0x7f, {0x0, 0x4}}, {0x6, 0x200, {0x0, 0x8}}, {0xff, 0x7ff, {0x0, 0x7}}, {0x6, 0x0, {0x2, 0x1}}, {0xfff, 0x7ff, {0x3, 0x4}}, {0x8, 0x7fcb, {0x1, 0x6}}, {0xead, 0x8000, {0x2, 0x101}}, {0x80, 0xff, {0x2, 0x101}}, {0x7, 0x777, {0x0, 0xfffffffa}}, {0x3, 0x7, {0x1}}, {0x6, 0x75f6, {0x2, 0x9}}, {0x81, 0x1ff, {0x3, 0x6}}, {0x8001, 0xe93f, {0x0, 0x2}}, {0x401, 0x7f, {0x0, 0x3}}, {0x7ff, 0x3f, {0x2, 0x1}}, {0x6, 0x7f, {0x0, 0x10001}}, {0x1, 0x40, {0x0, 0x80000001}}, {0x1ff, 0xb62, {0x3, 0x8000}}, {0x81, 0x3, {0x0, 0x1}}, {0xc11d, 0x1, {0x2, 0x3ff}}, {0x1fb, 0x6, {0x3, 0x9}}, {0x47b, 0x3, {0x3, 0x4}}, {0x3, 0x0, {0x3, 0x3}}, {0x200, 0x294, {0x3, 0x1}}, {0x9, 0xfd0b, {0x1, 0xfff}}, {0x2, 0x3e75, {0x1, 0x6}}, {0x30, 0x4, {0x3, 0x6573}}, {0x9, 0x0, {0x2, 0x4}}, {0x8, 0x0, {0x2, 0x3}}, {0x5c, 0x3ff, {0x0, 0xc9c}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0xd9, 0x3, 0xfe01, 0x1f, 0x2, 'syz0\x00', "4124a1acdba91a2b60b109fe8bb97a05c7be8ddda573f04fadcf9351a800e4b4", "e822d259f11da6d077d8d8ea19ffca8dc3dff54ea37d487b510cc24c1a0979b2", [{0x9, 0x81, {0x3, 0x7f}}, {0x5, 0x4, {0x0, 0x8}}, {0x9, 0x2, {0x0, 0x74d}}, {0x6, 0x7f, {0x1, 0x5}}, {0x3, 0x9, {0x1, 0x7fffffff}}, {0x6, 0x1000, {0x3, 0x81}}, {0x1, 0x8, {0x1, 0x4}}, {0x4, 0x8, {0x2, 0xd59d}}, {0xf783, 0xf185, {0x3, 0x6}}, {0x1, 0x3, {0x3, 0x800}}, {0x8, 0x8001, {0x2, 0x5}}, {0x1129, 0x101, {0x1}}, {0x7, 0x3, {0x2, 0x5}}, {0x7, 0x0, {0x3, 0x100}}, {0x401, 0x5, {0x1, 0x4}}, {0x81, 0x4, {0x1, 0x5}}, {0x5, 0x800, {0x0, 0x2}}, {0x7f, 0xd, {0x3, 0x230}}, {0x4, 0x7, {0x1, 0x60}}, {0x8, 0x1000, {0x0, 0x2}}, {0x8000, 0x1, {0x3, 0x8}}, {0x44bb, 0x2, {0x1, 0x7fbf}}, {0x3, 0x5, {0x2, 0x3}}, {0x81, 0x6, {0x1, 0x2}}, {0x3f, 0x4b0, {0x1, 0x8}}, {0x8, 0x8, {0x2, 0x1}}, {0x9, 0xba54, {0x3, 0x401}}, {0x0, 0xef, {0x3, 0x7}}, {0x4, 0x6, {0x0, 0x1f}}, {0x5, 0x5, {0x3, 0x5}}, {0x6, 0x2, {0x3, 0x6}}, {0x5, 0x8000, {0x0, 0x8001}}, {0x8, 0x1, {0x3, 0x5}}, {0xbe, 0x1ba3, {0x2, 0x1}}, {0x4, 0x9, {0x2, 0x9}}, {0x4236, 0x0, {0x2, 0x6}}, {0x7, 0x1000, {0x3, 0x4}}, {0x996, 0x9, {0x1, 0x5b}}, {0x3ff, 0x8, {0x1, 0xffffffff}}, {0x7, 0x800, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x4, 0x40, 0x1, 0x9, 0xe, 'syz0\x00', "e438546755cbe33290ee799e9fba1dc36280a39dece7341a663ecd99dbdf4bca", "11b3643b75edc510ecfedc0c43b2b0d9a3dd1d127857de4ef8eeb5d19404987d", [{0x15, 0x20, {0x3}}, {0xff38, 0x9, {0x1, 0x5}}, {0x4f4, 0x1f, {0x2, 0x40}}, {0x56f, 0x1, {0x2, 0x1f}}, {0xdba, 0x31, {0x0, 0x6}}, {0x20, 0x3, {0x1, 0x8001}}, {0x5, 0x3, {0x1, 0x8}}, {0x1, 0x3, {0x2, 0x9}}, {0xfff, 0x9, {0x1, 0x1f}}, {0x20, 0x1000, {0x3, 0x5f}}, {0x7f, 0x800, {0x3, 0x964f}}, {0x1f, 0xb0, {0x0, 0xcb4}}, {0x0, 0xfffd, {0x1}}, {0x5, 0xcc, {0x3, 0x6}}, {0x0, 0xfff7, {0x3, 0x9}}, {0x4ac, 0x9, {0x0, 0x3}}, {0xef, 0x401, {0x3}}, {0x1, 0x1, {0x0, 0x32e9fcc1}}, {0x1, 0x4, {0x0, 0x8}}, {0x7, 0x100, {0x2, 0x1f}}, {0x1, 0x100, {0x0, 0x6}}, {0x101, 0xee8f, {0x2, 0x77266521}}, {0x6, 0x7, {0x1, 0x7f}}, {0xffc1, 0x2, {0x3, 0xff}}, {0x20, 0xd158, {0x3, 0x80000001}}, {0x20, 0x0, {0x1, 0x1}}, {0x60b, 0x0, {0x2, 0x3}}, {0x4, 0x2, {0x0, 0x8}}, {0x0, 0x3, {0x2, 0x5}}, {0x1, 0x1, {0x1, 0x8}}, {0x1, 0x2, {0x3, 0xff}}, {0x0, 0xfffb, {0x2, 0xe766}}, {0x0, 0x2b0, {0x2, 0x8}}, {0x2, 0x8, {0x2, 0xfffffffa}}, {0x200, 0x7, {0x2, 0x3f}}, {0x40, 0x5, {0x0, 0x5}}, {0xa983, 0x3, {0x1, 0x2}}, {0x5, 0x7, {0x0, 0x7}}, {0x739, 0x4, {0x2, 0x34}}, {0x5c5a, 0x1f, {0x3, 0x7f}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r7 = socket(0x29, 0xe, 0x43) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x177b52fde52ccb5}, 0x4080) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x54, r8, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x48}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x37}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x16db301d812be3c7) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x38, r8, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x48) 02:01:51 executing program 7: sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x8050) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x52}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe4, r4, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x44881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x44060) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x1, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008100}, 0x24010011) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x42002}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200000c1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2f3c1ed6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r3) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000) 02:01:51 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) keyctl$negate(0xd, r0, 0x1, r0) r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, r3) r4 = add_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540), 0x0, r3) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={r4, 0xbd, 0x13}, &(0x7f00000005c0)={'enc=', 'pkcs1', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f0000000640)="f077c074fe0280996d68618b5c1f1d3404b9b90a09c2af0faef2b06502f959c26035a0777eab4e622d9b282e0acc2c7f41bf6e4b5028c3a6dfee99856f43902edffdabcd711bc5d2e6d1f4430a3ac18b301afbe115636762fa092030f9f4bc06ed7857457b0cc3a7e23e39f26dfa5bfc58113379cbc0b94cb6b8e1fa066ed0592a9e3ea46f87626cc82fe7ee99f7033b96ef2f1e634a71c369991b941fb287a2ea969851b332b80bd2544739f02bf042ceb2646b5d7216ede2a41d6ca7", &(0x7f0000000700)=""/19) r5 = geteuid() keyctl$chown(0x4, r4, r5, r2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, 0xffffffffffffffff, 0x8000000) 02:01:51 executing program 1: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5a000100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040880}, 0x20008000) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80010440}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x5, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x20008800) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "9b4870ec3767fb1feecabdd05c3917ee"}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x154, 0x0, 0x10, 0x70bd2c, 0xfff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x410}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb8}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6da}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x62b}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3240}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xba}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xdad}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0xc801}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4008800) r3 = socket(0x15, 0x6, 0x8) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="37d2cd6a46e7"}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40002) r4 = syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xbaa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x3c}}, 0x110) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7f}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40400d5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000f40)={&(0x7f0000000e00), 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) 02:01:51 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) keyctl$negate(0xd, r0, 0x1, r0) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, r2) r3 = add_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540), 0x0, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={r3, 0xbd, 0x13}, &(0x7f00000005c0)={'enc=', 'pkcs1', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f0000000640)="f077c074fe0280996d68618b5c1f1d3404b9b90a09c2af0faef2b06502f959c26035a0777eab4e622d9b282e0acc2c7f41bf6e4b5028c3a6dfee99856f43902edffdabcd711bc5d2e6d1f4430a3ac18b301afbe115636762fa092030f9f4bc06ed7857457b0cc3a7e23e39f26dfa5bfc58113379cbc0b94cb6b8e1fa066ed0592a9e3ea46f87626cc82fe7ee99f7033b96ef2f1e634a71c369991b941fb287a2ea969851b332b80bd2544739f02bf042ceb2646b5d7216ede2a41d6ca7", &(0x7f0000000700)=""/19) geteuid() mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, 0xffffffffffffffff, 0x8000000) 02:01:51 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_io_uring_complete(0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4eeceefc8e05182}, 0x40440c0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x5, 0x81, 0x3f, 0x0, 0x6, 0x4128, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x2380, 0x941, 0x3, 0x1, 0x0, 0x80000001, 0x7, 0x0, 0x10001, 0x0, 0x1000}, 0x0, 0xb, r0, 0x8) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x81, 0x8, 0x2, 0x0, 0xe9c5, 0x80, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x80a, 0x8, 0x9, 0x1, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x0, 0x1}, 0x0, 0x1, r1, 0x3) r2 = pidfd_open(0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x1, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x1840, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) r4 = syz_io_uring_complete(0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc01030}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, 0x1, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xa4}}, 0x20000005) pidfd_open(0xffffffffffffffff, 0x0) process_mrelease(r4, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x169003, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4d}]}, 0x2c}}, 0x0) 02:01:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socketpair(0x27, 0x1, 0x401, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb1c7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x90}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24044001}, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x10) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x420600, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r9, 0x320, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008805}, 0x4008001) socketpair(0xb, 0x80000, 0x7, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r2) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x78, r11, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xccc}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3ff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x10000}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xbf1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfa6a}]}, 0x54}}, 0x8000) 02:01:52 executing program 0: r0 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000009, 0x50, 0xffffffffffffffff, 0x10000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r1, 0x8, 0x0, 0xb8a0, 0x4, 0x1}, 0x9) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x8040) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x55a}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20001850}, 0xc0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x101, 0x0) io_uring_setup(0x36b6, &(0x7f00000004c0)={0x0, 0x406e, 0x10, 0x1, 0x103, 0x0, r4}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x6ba47bd7fccb6eb5}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe8, r6, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x479}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3d}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40840}, 0x4000010) get_mempolicy(&(0x7f0000000780), &(0x7f00000007c0), 0x9, &(0x7f0000ffc000/0x4000)=nil, 0x2) get_mempolicy(&(0x7f0000000800), &(0x7f0000000840), 0x6, &(0x7f0000ffb000/0x4000)=nil, 0x5) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r8, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x627}]}, 0x38}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r9, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0xa0220000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r6, 0x2, 0x38, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x88) 02:01:52 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) keyctl$negate(0xd, r0, 0x1, r0) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, r2) r3 = add_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540), 0x0, r2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000580)={r3, 0xbd, 0x13}, &(0x7f00000005c0)={'enc=', 'pkcs1', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f0000000640)="f077c074fe0280996d68618b5c1f1d3404b9b90a09c2af0faef2b06502f959c26035a0777eab4e622d9b282e0acc2c7f41bf6e4b5028c3a6dfee99856f43902edffdabcd711bc5d2e6d1f4430a3ac18b301afbe115636762fa092030f9f4bc06ed7857457b0cc3a7e23e39f26dfa5bfc58113379cbc0b94cb6b8e1fa066ed0592a9e3ea46f87626cc82fe7ee99f7033b96ef2f1e634a71c369991b941fb287a2ea969851b332b80bd2544739f02bf042ceb2646b5d7216ede2a41d6ca7", &(0x7f0000000700)=""/19) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, 0xffffffffffffffff, 0x8000000) 02:02:06 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socketpair(0x27, 0x1, 0x401, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb1c7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x90}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24044001}, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x10) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x420600, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r9, 0x320, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008805}, 0x4008001) socketpair(0xb, 0x80000, 0x7, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3ff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x10000}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xbf1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfa6a}]}, 0x54}}, 0x8000) 02:02:06 executing program 0: r0 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000009, 0x50, 0xffffffffffffffff, 0x10000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r1, 0x8, 0x0, 0xb8a0, 0x4, 0x1}, 0x9) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x8040) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x55a}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20001850}, 0xc0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x101, 0x0) io_uring_setup(0x36b6, &(0x7f00000004c0)={0x0, 0x406e, 0x10, 0x1, 0x103, 0x0, r4}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x6ba47bd7fccb6eb5}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe8, r6, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x479}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3d}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40840}, 0x4000010) get_mempolicy(&(0x7f0000000780), &(0x7f00000007c0), 0x9, &(0x7f0000ffc000/0x4000)=nil, 0x2) get_mempolicy(&(0x7f0000000800), &(0x7f0000000840), 0x6, &(0x7f0000ffb000/0x4000)=nil, 0x5) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r8, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x627}]}, 0x38}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 02:02:06 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x20010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x158, &(0x7f0000000000)=0x81, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000040)=0x1, 0x0, 0x4) r1 = syz_io_uring_complete(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff7}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2fb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4abf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8801}, 0x20010000) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = io_uring_setup(0x5308, &(0x7f0000000380)={0x0, 0x6953, 0x10, 0x0, 0x1e6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff0000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) syz_io_uring_submit(r0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r1, 0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x410102, 0x12345}, 0x1f) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2a5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x92}, 0x8000) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000007c0)=0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r4) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xa8, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffc}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xda4d}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcf48}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x800) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x7c, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x509}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x16}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x4c080) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000a, 0x11, r1, 0x10000000) 02:02:06 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) keyctl$negate(0xd, r0, 0x1, r0) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, r2) add_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540), 0x0, r2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, 0xffffffffffffffff, 0x8000000) 02:02:06 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_io_uring_complete(0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4eeceefc8e05182}, 0x40440c0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x5, 0x81, 0x3f, 0x0, 0x6, 0x4128, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x2380, 0x941, 0x3, 0x1, 0x0, 0x80000001, 0x7, 0x0, 0x10001, 0x0, 0x1000}, 0x0, 0xb, r0, 0x8) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x81, 0x8, 0x2, 0x0, 0xe9c5, 0x80, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x80a, 0x8, 0x9, 0x1, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x0, 0x1}, 0x0, 0x1, r1, 0x3) r2 = pidfd_open(0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x1, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x1840, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) r4 = syz_io_uring_complete(0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc01030}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, 0x1, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xa4}}, 0x20000005) pidfd_open(0xffffffffffffffff, 0x0) process_mrelease(r4, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x169003, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4d}]}, 0x2c}}, 0x0) 02:02:06 executing program 3: socket$packet(0x11, 0x2, 0x300) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x200c4}, 0x80) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4044004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048054}, 0x40) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x100, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x24}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0xc}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x2001}, 0x8840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) socketpair(0x23, 0x6, 0x5, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x0, 0x12c, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) socketpair(0x1a, 0x1, 0x9, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044090}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x3, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x800) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001640)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000000a40)={0xbb8, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x8}, 0xbc, 0x3f, 0x4, 0x800, 0x18, 'syz0\x00', "cc0cc613c39b68fcb43bf5e8713278d025a25c2c2a8206cda67bfd20f2223a87", "40c78e6340b8ef1e4584c96b0b66b5e0b93d50579004c88027b79af60de4910e", [{0x3ff, 0x1, {0x2, 0x76a903df}}, {0x3, 0x7ff, {0x2}}, {0x9, 0x400, {0x1, 0x8}}, {0x80, 0xedb, {0x3, 0x3}}, {0x3, 0x9, {0x2, 0x4}}, {0x4, 0x81, {0x2, 0x38a1}}, {0x5, 0x7, {0x2, 0xffffffe0}}, {0x3ff, 0x67, {0x0, 0xe0c}}, {0xfff, 0x6, {0x1, 0xfffffff9}}, {0xfffb, 0x401, {0x1, 0x81}}, {0x8000, 0x7, {0x3, 0x2}}, {0x80, 0xfffa, {0x0, 0x66}}, {0x3ff, 0x44f, {0x1, 0x100}}, {0x6c23, 0x2, {0x1, 0x2}}, {0x7, 0x8000, {0x1, 0x3}}, {0x9, 0x0, {0x3, 0xd6}}, {0x200, 0x0, {0x8055bb359099c487, 0x8}}, {0xb80, 0xe2c, {0x3, 0x97}}, {0x3, 0x3, {0x1, 0x5}}, {0xfff, 0x8b, {0x3, 0x93}}, {0x3ff, 0x3, {0x2, 0x7}}, {0x7, 0xffff, {0x2, 0x6}}, {0x3, 0x4, {0x3, 0xffffff94}}, {0x7, 0x2, {0x1, 0x3}}, {0x9, 0x4, {0x2, 0x3}}, {0xfff, 0x4, {0x0, 0x1}}, {0xfffd, 0xffff, {0x1, 0xfffffffa}}, {0x7bba, 0x1f, {0x2, 0x9}}, {0x5ac, 0xfffa, {0x2, 0x800}}, {0x7, 0x0, {0x1, 0x5}}, {0x1000, 0x2, {0x3, 0x5}}, {0x6, 0x3, {0x1, 0x81}}, {0x0, 0x4, {0x1, 0xef6d}}, {0x1, 0x1, {0x2, 0x10000}}, {0x3f, 0x81, {0x0, 0x2}}, {0x2, 0x8966, {0x2, 0x9}}, {0x5, 0x40, {0x3, 0x8000}}, {0x101, 0x8000, {0x1, 0xfffffffe}}, {0x6, 0x9, {0x3, 0x2}}, {0x3, 0x7, {0x0, 0x101}}]}}}, {{0x254, 0x1, {{0x2, 0x64a}, 0xff, 0x7f, 0x2, 0xc92, 0xd, 'syz0\x00', "5c860f3c6791e89ff06f5ac820d6fc492a04fbb5ed2480429a70d9c2f272af2f", "775a84e47f380815c66a0cd56030c9f30808a922a5754aeca93bf353625a71a4", [{0x2, 0x2, {0x2, 0x3ff}}, {0x5, 0x7, {0x3, 0xffffffe0}}, {0x0, 0x7f, {0x1, 0x5}}, {0x68, 0xfffb, {0x0, 0x400}}, {0x200, 0xff81, {0x2, 0x1ff}}, {0x81, 0x6}, {0x1000, 0x7, {0x2, 0x8}}, {0x7fff, 0x7, {0x1}}, {0x5, 0x584a, {0x2, 0x5}}, {0x6, 0x401, {0x3}}, {0x1f, 0x101}, {0x0, 0x3, {0x0, 0x8}}, {0x0, 0x80, {0x1, 0xfffffff7}}, {0x567, 0x60, {0x0, 0x1f}}, {0xffff, 0x8000, {0x1, 0xe24}}, {0x130, 0x3}, {0x8, 0xe4, {0x1, 0x7}}, {0x80, 0x6, {0x3, 0x3f}}, {0xffff, 0x0, {0x1, 0x6}}, {0x6, 0x1, {0x3, 0x1}}, {0x5, 0x6, {0x3, 0xffff}}, {0x7, 0x800, {0x1, 0x5}}, {0x7ff, 0x7fff, {0x2, 0x7}}, {0x57b3, 0x7, {0x3, 0x6b69}}, {0x1, 0xfff, {0x2, 0x20d1}}, {0x3f, 0x3, {0x2, 0x3}}, {0xe25c, 0x7ff, {0x1, 0x400}}, {0x6, 0x9, {0x0, 0x10000}}, {0xb4, 0x8001, {0x3, 0x1}}, {0x2, 0x0, {0x2}}, {0x401, 0x20, {0x3, 0x6d51}}, {0x2, 0x0, {0x2, 0x4}}, {0x4bb, 0x1, {0x1, 0x101}}, {0x1, 0x66d8, {0x1, 0x3ff}}, {0x9, 0x6, {0x0, 0xb2a}}, {0x8, 0x7, {0x2, 0x1}}, {0x3, 0x8001, {0x1, 0xe244}}, {0x5, 0x4, {0x2, 0x81}}, {0x0, 0x7, {0x3, 0x2}}, {0x200, 0x20, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x10001}, 0x2, 0x1f, 0xff, 0x9, 0x21, 'syz1\x00', "a705b89babab6dfa9e32db77bc20635fa3e6e06a6707847a749c95dde281ddd3", "6136742018f9e0a2903e65b3d7fbbfaf28a5db218c231747bc8d39b3e99cc91b", [{0x5, 0x7529, {0x2, 0xffff7fff}}, {0x8001, 0x1, {0x3, 0xfff}}, {0xbfc, 0x2, {0x3}}, {0xfff8, 0x0, {0x3, 0x8}}, {0x7, 0x1, {0x2, 0x4}}, {0x9, 0x8, {0x1}}, {0x1, 0x9, {0x2, 0x10000}}, {0x1, 0x4, {0x0, 0x97b5}}, {0x3, 0x6, {0x1, 0x1000}}, {0x1ff, 0x4, {0x1, 0x5}}, {0x6, 0x7f, {0x0, 0x4}}, {0x6, 0x200, {0x0, 0x8}}, {0xff, 0x7ff, {0x0, 0x7}}, {0x6, 0x0, {0x2, 0x1}}, {0xfff, 0x7ff, {0x3, 0x4}}, {0x8, 0x7fcb, {0x1, 0x6}}, {0xead, 0x8000, {0x2, 0x101}}, {0x80, 0xff, {0x2, 0x101}}, {0x7, 0x777, {0x0, 0xfffffffa}}, {0x3, 0x7, {0x1}}, {0x6, 0x75f6, {0x2, 0x9}}, {0x81, 0x1ff, {0x3, 0x6}}, {0x8001, 0xe93f, {0x0, 0x2}}, {0x401, 0x7f, {0x0, 0x3}}, {0x7ff, 0x3f, {0x2, 0x1}}, {0x6, 0x7f, {0x0, 0x10001}}, {0x1, 0x40, {0x0, 0x80000001}}, {0x1ff, 0xb62, {0x3, 0x8000}}, {0x81, 0x3, {0x0, 0x1}}, {0xc11d, 0x1, {0x2, 0x3ff}}, {0x1fb, 0x6, {0x3, 0x9}}, {0x47b, 0x3, {0x3, 0x4}}, {0x3, 0x0, {0x3, 0x3}}, {0x200, 0x294, {0x3, 0x1}}, {0x9, 0xfd0b, {0x1, 0xfff}}, {0x2, 0x3e75, {0x1, 0x6}}, {0x30, 0x4, {0x3, 0x6573}}, {0x9, 0x0, {0x2, 0x4}}, {0x8, 0x0, {0x2, 0x3}}, {0x5c, 0x3ff, {0x0, 0xc9c}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0xd9, 0x3, 0xfe01, 0x1f, 0x2, 'syz0\x00', "4124a1acdba91a2b60b109fe8bb97a05c7be8ddda573f04fadcf9351a800e4b4", "e822d259f11da6d077d8d8ea19ffca8dc3dff54ea37d487b510cc24c1a0979b2", [{0x9, 0x81, {0x3, 0x7f}}, {0x5, 0x4, {0x0, 0x8}}, {0x9, 0x2, {0x0, 0x74d}}, {0x6, 0x7f, {0x1, 0x5}}, {0x3, 0x9, {0x1, 0x7fffffff}}, {0x6, 0x1000, {0x3, 0x81}}, {0x1, 0x8, {0x1, 0x4}}, {0x4, 0x8, {0x2, 0xd59d}}, {0xf783, 0xf185, {0x3, 0x6}}, {0x1, 0x3, {0x3, 0x800}}, {0x8, 0x8001, {0x2, 0x5}}, {0x1129, 0x101, {0x1}}, {0x7, 0x3, {0x2, 0x5}}, {0x7, 0x0, {0x3, 0x100}}, {0x401, 0x5, {0x1, 0x4}}, {0x81, 0x4, {0x1, 0x5}}, {0x5, 0x800, {0x0, 0x2}}, {0x7f, 0xd, {0x3, 0x230}}, {0x4, 0x7, {0x1, 0x60}}, {0x8, 0x1000, {0x0, 0x2}}, {0x8000, 0x1, {0x3, 0x8}}, {0x44bb, 0x2, {0x1, 0x7fbf}}, {0x3, 0x5, {0x2, 0x3}}, {0x81, 0x6, {0x1, 0x2}}, {0x3f, 0x4b0, {0x1, 0x8}}, {0x8, 0x8, {0x2, 0x1}}, {0x9, 0xba54, {0x3, 0x401}}, {0x0, 0xef, {0x3, 0x7}}, {0x4, 0x6, {0x0, 0x1f}}, {0x5, 0x5, {0x3, 0x5}}, {0x6, 0x2, {0x3, 0x6}}, {0x5, 0x8000, {0x0, 0x8001}}, {0x8, 0x1, {0x3, 0x5}}, {0xbe, 0x1ba3, {0x2, 0x1}}, {0x4, 0x9, {0x2, 0x9}}, {0x4236, 0x0, {0x2, 0x6}}, {0x7, 0x1000, {0x3, 0x4}}, {0x996, 0x9, {0x1, 0x5b}}, {0x3ff, 0x8, {0x1, 0xffffffff}}, {0x7, 0x800, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x4, 0x40, 0x1, 0x9, 0xe, 'syz0\x00', "e438546755cbe33290ee799e9fba1dc36280a39dece7341a663ecd99dbdf4bca", "11b3643b75edc510ecfedc0c43b2b0d9a3dd1d127857de4ef8eeb5d19404987d", [{0x15, 0x20, {0x3}}, {0xff38, 0x9, {0x1, 0x5}}, {0x4f4, 0x1f, {0x2, 0x40}}, {0x56f, 0x1, {0x2, 0x1f}}, {0xdba, 0x31, {0x0, 0x6}}, {0x20, 0x3, {0x1, 0x8001}}, {0x5, 0x3, {0x1, 0x8}}, {0x1, 0x3, {0x2, 0x9}}, {0xfff, 0x9, {0x1, 0x1f}}, {0x20, 0x1000, {0x3, 0x5f}}, {0x7f, 0x800, {0x3, 0x964f}}, {0x1f, 0xb0, {0x0, 0xcb4}}, {0x0, 0xfffd, {0x1}}, {0x5, 0xcc, {0x3, 0x6}}, {0x0, 0xfff7, {0x3, 0x9}}, {0x4ac, 0x9, {0x0, 0x3}}, {0xef, 0x401, {0x3}}, {0x1, 0x1, {0x0, 0x32e9fcc1}}, {0x1, 0x4, {0x0, 0x8}}, {0x7, 0x100, {0x2, 0x1f}}, {0x1, 0x100, {0x0, 0x6}}, {0x101, 0xee8f, {0x2, 0x77266521}}, {0x6, 0x7, {0x1, 0x7f}}, {0xffc1, 0x2, {0x3, 0xff}}, {0x20, 0xd158, {0x3, 0x80000001}}, {0x20, 0x0, {0x1, 0x1}}, {0x60b, 0x0, {0x2, 0x3}}, {0x4, 0x2, {0x0, 0x8}}, {0x0, 0x3, {0x2, 0x5}}, {0x1, 0x1, {0x1, 0x8}}, {0x1, 0x2, {0x3, 0xff}}, {0x0, 0xfffb, {0x2, 0xe766}}, {0x0, 0x2b0, {0x2, 0x8}}, {0x2, 0x8, {0x2, 0xfffffffa}}, {0x200, 0x7, {0x2, 0x3f}}, {0x40, 0x5, {0x0, 0x5}}, {0xa983, 0x3, {0x1, 0x2}}, {0x5, 0x7, {0x0, 0x7}}, {0x739, 0x4, {0x2, 0x34}}, {0x5c5a, 0x1f, {0x3, 0x7f}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r7 = socket(0x29, 0xe, 0x43) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x177b52fde52ccb5}, 0x4080) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x54, r8, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x48}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x37}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x16db301d812be3c7) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x38, r8, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x48) 02:02:06 executing program 7: sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x8050) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x52}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe4, r4, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x44881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x44060) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x1, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008100}, 0x24010011) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x42002}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200000c1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2f3c1ed6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r3) sendmsg$NL802154_CMD_GET_SEC_DEV(r8, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000) 02:02:06 executing program 1: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5a000100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040880}, 0x20008000) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80010440}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x5, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x20008800) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "9b4870ec3767fb1feecabdd05c3917ee"}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x154, 0x0, 0x10, 0x70bd2c, 0xfff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x410}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb8}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6da}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x62b}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3240}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xba}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xdad}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0xc801}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4008800) r3 = socket(0x15, 0x6, 0x8) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="37d2cd6a46e7"}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40002) r4 = syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xbaa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x3c}}, 0x110) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7f}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40400d5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000e40)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000f40)={&(0x7f0000000e00), 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) 02:02:06 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) keyctl$negate(0xd, r0, 0x1, r0) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)={'syz', 0x0}, r2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, 0xffffffffffffffff, 0x8000000) 02:02:06 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_io_uring_complete(0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4eeceefc8e05182}, 0x40440c0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x5, 0x81, 0x3f, 0x0, 0x6, 0x4128, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x2380, 0x941, 0x3, 0x1, 0x0, 0x80000001, 0x7, 0x0, 0x10001, 0x0, 0x1000}, 0x0, 0xb, r0, 0x8) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x81, 0x8, 0x2, 0x0, 0xe9c5, 0x80, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x80a, 0x8, 0x9, 0x1, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x0, 0x1}, 0x0, 0x1, r1, 0x3) r2 = pidfd_open(0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x1, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x1840, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) r4 = syz_io_uring_complete(0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc01030}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, 0x1, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xa4}}, 0x20000005) pidfd_open(0xffffffffffffffff, 0x0) process_mrelease(r4, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4d}]}, 0x2c}}, 0x0) 02:02:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socketpair(0x27, 0x1, 0x401, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb1c7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x90}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24044001}, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x10) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x420600, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r9, 0x320, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008805}, 0x4008001) socketpair(0xb, 0x80000, 0x7, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3ff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x10000}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xbf1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfa6a}]}, 0x54}}, 0x8000) 02:02:07 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) keyctl$negate(0xd, r0, 0x1, r0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, 0xffffffffffffffff, 0x8000000) 02:02:07 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x20010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x158, &(0x7f0000000000)=0x81, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000040)=0x1, 0x0, 0x4) r1 = syz_io_uring_complete(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff7}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2fb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4abf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8801}, 0x20010000) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = io_uring_setup(0x5308, &(0x7f0000000380)={0x0, 0x6953, 0x10, 0x0, 0x1e6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff0000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) syz_io_uring_submit(r0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r1, 0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x410102, 0x12345}, 0x1f) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2a5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x92}, 0x8000) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000007c0)=0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r4) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xa8, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffc}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xda4d}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcf48}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x800) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x7c, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x509}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x16}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x4c080) 02:02:07 executing program 0: r0 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000009, 0x50, 0xffffffffffffffff, 0x10000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r1, 0x8, 0x0, 0xb8a0, 0x4, 0x1}, 0x9) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x8040) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x55a}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20001850}, 0xc0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x101, 0x0) io_uring_setup(0x36b6, &(0x7f00000004c0)={0x0, 0x406e, 0x10, 0x1, 0x103, 0x0, r4}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x6ba47bd7fccb6eb5}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe8, r6, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x479}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3d}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40840}, 0x4000010) get_mempolicy(&(0x7f0000000780), &(0x7f00000007c0), 0x9, &(0x7f0000ffc000/0x4000)=nil, 0x2) get_mempolicy(&(0x7f0000000800), &(0x7f0000000840), 0x6, &(0x7f0000ffb000/0x4000)=nil, 0x5) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r8, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x627}]}, 0x38}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 02:02:07 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_io_uring_complete(0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4eeceefc8e05182}, 0x40440c0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x5, 0x81, 0x3f, 0x0, 0x6, 0x4128, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x2380, 0x941, 0x3, 0x1, 0x0, 0x80000001, 0x7, 0x0, 0x10001, 0x0, 0x1000}, 0x0, 0xb, r0, 0x8) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x81, 0x8, 0x2, 0x0, 0xe9c5, 0x80, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x80a, 0x8, 0x9, 0x1, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x0, 0x1}, 0x0, 0x1, r1, 0x3) r2 = pidfd_open(0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x1, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x1840, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) syz_io_uring_complete(0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc01030}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, 0x1, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xa4}}, 0x20000005) pidfd_open(0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4d}]}, 0x2c}}, 0x0) 02:02:21 executing program 3: socket$packet(0x11, 0x2, 0x300) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x200c4}, 0x80) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4044004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048054}, 0x40) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x100, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x24}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0xc}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x2001}, 0x8840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) socketpair(0x23, 0x6, 0x5, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x0, 0x12c, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) socketpair(0x1a, 0x1, 0x9, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044090}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x3, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x800) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001640)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000000a40)={0xbb8, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x8}, 0xbc, 0x3f, 0x4, 0x800, 0x18, 'syz0\x00', "cc0cc613c39b68fcb43bf5e8713278d025a25c2c2a8206cda67bfd20f2223a87", "40c78e6340b8ef1e4584c96b0b66b5e0b93d50579004c88027b79af60de4910e", [{0x3ff, 0x1, {0x2, 0x76a903df}}, {0x3, 0x7ff, {0x2}}, {0x9, 0x400, {0x1, 0x8}}, {0x80, 0xedb, {0x3, 0x3}}, {0x3, 0x9, {0x2, 0x4}}, {0x4, 0x81, {0x2, 0x38a1}}, {0x5, 0x7, {0x2, 0xffffffe0}}, {0x3ff, 0x67, {0x0, 0xe0c}}, {0xfff, 0x6, {0x1, 0xfffffff9}}, {0xfffb, 0x401, {0x1, 0x81}}, {0x8000, 0x7, {0x3, 0x2}}, {0x80, 0xfffa, {0x0, 0x66}}, {0x3ff, 0x44f, {0x1, 0x100}}, {0x6c23, 0x2, {0x1, 0x2}}, {0x7, 0x8000, {0x1, 0x3}}, {0x9, 0x0, {0x3, 0xd6}}, {0x200, 0x0, {0x8055bb359099c487, 0x8}}, {0xb80, 0xe2c, {0x3, 0x97}}, {0x3, 0x3, {0x1, 0x5}}, {0xfff, 0x8b, {0x3, 0x93}}, {0x3ff, 0x3, {0x2, 0x7}}, {0x7, 0xffff, {0x2, 0x6}}, {0x3, 0x4, {0x3, 0xffffff94}}, {0x7, 0x2, {0x1, 0x3}}, {0x9, 0x4, {0x2, 0x3}}, {0xfff, 0x4, {0x0, 0x1}}, {0xfffd, 0xffff, {0x1, 0xfffffffa}}, {0x7bba, 0x1f, {0x2, 0x9}}, {0x5ac, 0xfffa, {0x2, 0x800}}, {0x7, 0x0, {0x1, 0x5}}, {0x1000, 0x2, {0x3, 0x5}}, {0x6, 0x3, {0x1, 0x81}}, {0x0, 0x4, {0x1, 0xef6d}}, {0x1, 0x1, {0x2, 0x10000}}, {0x3f, 0x81, {0x0, 0x2}}, {0x2, 0x8966, {0x2, 0x9}}, {0x5, 0x40, {0x3, 0x8000}}, {0x101, 0x8000, {0x1, 0xfffffffe}}, {0x6, 0x9, {0x3, 0x2}}, {0x3, 0x7, {0x0, 0x101}}]}}}, {{0x254, 0x1, {{0x2, 0x64a}, 0xff, 0x7f, 0x2, 0xc92, 0xd, 'syz0\x00', "5c860f3c6791e89ff06f5ac820d6fc492a04fbb5ed2480429a70d9c2f272af2f", "775a84e47f380815c66a0cd56030c9f30808a922a5754aeca93bf353625a71a4", [{0x2, 0x2, {0x2, 0x3ff}}, {0x5, 0x7, {0x3, 0xffffffe0}}, {0x0, 0x7f, {0x1, 0x5}}, {0x68, 0xfffb, {0x0, 0x400}}, {0x200, 0xff81, {0x2, 0x1ff}}, {0x81, 0x6}, {0x1000, 0x7, {0x2, 0x8}}, {0x7fff, 0x7, {0x1}}, {0x5, 0x584a, {0x2, 0x5}}, {0x6, 0x401, {0x3}}, {0x1f, 0x101}, {0x0, 0x3, {0x0, 0x8}}, {0x0, 0x80, {0x1, 0xfffffff7}}, {0x567, 0x60, {0x0, 0x1f}}, {0xffff, 0x8000, {0x1, 0xe24}}, {0x130, 0x3}, {0x8, 0xe4, {0x1, 0x7}}, {0x80, 0x6, {0x3, 0x3f}}, {0xffff, 0x0, {0x1, 0x6}}, {0x6, 0x1, {0x3, 0x1}}, {0x5, 0x6, {0x3, 0xffff}}, {0x7, 0x800, {0x1, 0x5}}, {0x7ff, 0x7fff, {0x2, 0x7}}, {0x57b3, 0x7, {0x3, 0x6b69}}, {0x1, 0xfff, {0x2, 0x20d1}}, {0x3f, 0x3, {0x2, 0x3}}, {0xe25c, 0x7ff, {0x1, 0x400}}, {0x6, 0x9, {0x0, 0x10000}}, {0xb4, 0x8001, {0x3, 0x1}}, {0x2, 0x0, {0x2}}, {0x401, 0x20, {0x3, 0x6d51}}, {0x2, 0x0, {0x2, 0x4}}, {0x4bb, 0x1, {0x1, 0x101}}, {0x1, 0x66d8, {0x1, 0x3ff}}, {0x9, 0x6, {0x0, 0xb2a}}, {0x8, 0x7, {0x2, 0x1}}, {0x3, 0x8001, {0x1, 0xe244}}, {0x5, 0x4, {0x2, 0x81}}, {0x0, 0x7, {0x3, 0x2}}, {0x200, 0x20, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x10001}, 0x2, 0x1f, 0xff, 0x9, 0x21, 'syz1\x00', "a705b89babab6dfa9e32db77bc20635fa3e6e06a6707847a749c95dde281ddd3", "6136742018f9e0a2903e65b3d7fbbfaf28a5db218c231747bc8d39b3e99cc91b", [{0x5, 0x7529, {0x2, 0xffff7fff}}, {0x8001, 0x1, {0x3, 0xfff}}, {0xbfc, 0x2, {0x3}}, {0xfff8, 0x0, {0x3, 0x8}}, {0x7, 0x1, {0x2, 0x4}}, {0x9, 0x8, {0x1}}, {0x1, 0x9, {0x2, 0x10000}}, {0x1, 0x4, {0x0, 0x97b5}}, {0x3, 0x6, {0x1, 0x1000}}, {0x1ff, 0x4, {0x1, 0x5}}, {0x6, 0x7f, {0x0, 0x4}}, {0x6, 0x200, {0x0, 0x8}}, {0xff, 0x7ff, {0x0, 0x7}}, {0x6, 0x0, {0x2, 0x1}}, {0xfff, 0x7ff, {0x3, 0x4}}, {0x8, 0x7fcb, {0x1, 0x6}}, {0xead, 0x8000, {0x2, 0x101}}, {0x80, 0xff, {0x2, 0x101}}, {0x7, 0x777, {0x0, 0xfffffffa}}, {0x3, 0x7, {0x1}}, {0x6, 0x75f6, {0x2, 0x9}}, {0x81, 0x1ff, {0x3, 0x6}}, {0x8001, 0xe93f, {0x0, 0x2}}, {0x401, 0x7f, {0x0, 0x3}}, {0x7ff, 0x3f, {0x2, 0x1}}, {0x6, 0x7f, {0x0, 0x10001}}, {0x1, 0x40, {0x0, 0x80000001}}, {0x1ff, 0xb62, {0x3, 0x8000}}, {0x81, 0x3, {0x0, 0x1}}, {0xc11d, 0x1, {0x2, 0x3ff}}, {0x1fb, 0x6, {0x3, 0x9}}, {0x47b, 0x3, {0x3, 0x4}}, {0x3, 0x0, {0x3, 0x3}}, {0x200, 0x294, {0x3, 0x1}}, {0x9, 0xfd0b, {0x1, 0xfff}}, {0x2, 0x3e75, {0x1, 0x6}}, {0x30, 0x4, {0x3, 0x6573}}, {0x9, 0x0, {0x2, 0x4}}, {0x8, 0x0, {0x2, 0x3}}, {0x5c, 0x3ff, {0x0, 0xc9c}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0xd9, 0x3, 0xfe01, 0x1f, 0x2, 'syz0\x00', "4124a1acdba91a2b60b109fe8bb97a05c7be8ddda573f04fadcf9351a800e4b4", "e822d259f11da6d077d8d8ea19ffca8dc3dff54ea37d487b510cc24c1a0979b2", [{0x9, 0x81, {0x3, 0x7f}}, {0x5, 0x4, {0x0, 0x8}}, {0x9, 0x2, {0x0, 0x74d}}, {0x6, 0x7f, {0x1, 0x5}}, {0x3, 0x9, {0x1, 0x7fffffff}}, {0x6, 0x1000, {0x3, 0x81}}, {0x1, 0x8, {0x1, 0x4}}, {0x4, 0x8, {0x2, 0xd59d}}, {0xf783, 0xf185, {0x3, 0x6}}, {0x1, 0x3, {0x3, 0x800}}, {0x8, 0x8001, {0x2, 0x5}}, {0x1129, 0x101, {0x1}}, {0x7, 0x3, {0x2, 0x5}}, {0x7, 0x0, {0x3, 0x100}}, {0x401, 0x5, {0x1, 0x4}}, {0x81, 0x4, {0x1, 0x5}}, {0x5, 0x800, {0x0, 0x2}}, {0x7f, 0xd, {0x3, 0x230}}, {0x4, 0x7, {0x1, 0x60}}, {0x8, 0x1000, {0x0, 0x2}}, {0x8000, 0x1, {0x3, 0x8}}, {0x44bb, 0x2, {0x1, 0x7fbf}}, {0x3, 0x5, {0x2, 0x3}}, {0x81, 0x6, {0x1, 0x2}}, {0x3f, 0x4b0, {0x1, 0x8}}, {0x8, 0x8, {0x2, 0x1}}, {0x9, 0xba54, {0x3, 0x401}}, {0x0, 0xef, {0x3, 0x7}}, {0x4, 0x6, {0x0, 0x1f}}, {0x5, 0x5, {0x3, 0x5}}, {0x6, 0x2, {0x3, 0x6}}, {0x5, 0x8000, {0x0, 0x8001}}, {0x8, 0x1, {0x3, 0x5}}, {0xbe, 0x1ba3, {0x2, 0x1}}, {0x4, 0x9, {0x2, 0x9}}, {0x4236, 0x0, {0x2, 0x6}}, {0x7, 0x1000, {0x3, 0x4}}, {0x996, 0x9, {0x1, 0x5b}}, {0x3ff, 0x8, {0x1, 0xffffffff}}, {0x7, 0x800, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x4, 0x40, 0x1, 0x9, 0xe, 'syz0\x00', "e438546755cbe33290ee799e9fba1dc36280a39dece7341a663ecd99dbdf4bca", "11b3643b75edc510ecfedc0c43b2b0d9a3dd1d127857de4ef8eeb5d19404987d", [{0x15, 0x20, {0x3}}, {0xff38, 0x9, {0x1, 0x5}}, {0x4f4, 0x1f, {0x2, 0x40}}, {0x56f, 0x1, {0x2, 0x1f}}, {0xdba, 0x31, {0x0, 0x6}}, {0x20, 0x3, {0x1, 0x8001}}, {0x5, 0x3, {0x1, 0x8}}, {0x1, 0x3, {0x2, 0x9}}, {0xfff, 0x9, {0x1, 0x1f}}, {0x20, 0x1000, {0x3, 0x5f}}, {0x7f, 0x800, {0x3, 0x964f}}, {0x1f, 0xb0, {0x0, 0xcb4}}, {0x0, 0xfffd, {0x1}}, {0x5, 0xcc, {0x3, 0x6}}, {0x0, 0xfff7, {0x3, 0x9}}, {0x4ac, 0x9, {0x0, 0x3}}, {0xef, 0x401, {0x3}}, {0x1, 0x1, {0x0, 0x32e9fcc1}}, {0x1, 0x4, {0x0, 0x8}}, {0x7, 0x100, {0x2, 0x1f}}, {0x1, 0x100, {0x0, 0x6}}, {0x101, 0xee8f, {0x2, 0x77266521}}, {0x6, 0x7, {0x1, 0x7f}}, {0xffc1, 0x2, {0x3, 0xff}}, {0x20, 0xd158, {0x3, 0x80000001}}, {0x20, 0x0, {0x1, 0x1}}, {0x60b, 0x0, {0x2, 0x3}}, {0x4, 0x2, {0x0, 0x8}}, {0x0, 0x3, {0x2, 0x5}}, {0x1, 0x1, {0x1, 0x8}}, {0x1, 0x2, {0x3, 0xff}}, {0x0, 0xfffb, {0x2, 0xe766}}, {0x0, 0x2b0, {0x2, 0x8}}, {0x2, 0x8, {0x2, 0xfffffffa}}, {0x200, 0x7, {0x2, 0x3f}}, {0x40, 0x5, {0x0, 0x5}}, {0xa983, 0x3, {0x1, 0x2}}, {0x5, 0x7, {0x0, 0x7}}, {0x739, 0x4, {0x2, 0x34}}, {0x5c5a, 0x1f, {0x3, 0x7f}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r7 = socket(0x29, 0xe, 0x43) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x177b52fde52ccb5}, 0x4080) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x54, r8, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x48}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x37}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x16db301d812be3c7) 02:02:21 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x20010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x158, &(0x7f0000000000)=0x81, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000040)=0x1, 0x0, 0x4) r1 = syz_io_uring_complete(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff7}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2fb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4abf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8801}, 0x20010000) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = io_uring_setup(0x5308, &(0x7f0000000380)={0x0, 0x6953, 0x10, 0x0, 0x1e6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff0000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) syz_io_uring_submit(r0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r1, 0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x410102, 0x12345}, 0x1f) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2a5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x92}, 0x8000) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000007c0)=0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r4) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xa8, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffc}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xda4d}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcf48}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x800) 02:02:21 executing program 7: sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x8050) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x52}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe4, r4, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x44881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x44060) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x1, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008100}, 0x24010011) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x42002}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200000c1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2f3c1ed6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r3) 02:02:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socketpair(0x27, 0x1, 0x401, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb1c7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x90}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24044001}, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x10) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x420600, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r9, 0x320, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008805}, 0x4008001) socketpair(0xb, 0x80000, 0x7, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3ff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x10000}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xbf1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfa6a}]}, 0x54}}, 0x8000) 02:02:21 executing program 1: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5a000100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040880}, 0x20008000) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80010440}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x5, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x20008800) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "9b4870ec3767fb1feecabdd05c3917ee"}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x154, 0x0, 0x10, 0x70bd2c, 0xfff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x410}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb8}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6da}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x62b}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3240}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xba}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xdad}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0xc801}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4008800) r3 = socket(0x15, 0x6, 0x8) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="37d2cd6a46e7"}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40002) r4 = syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xbaa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x3c}}, 0x110) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7f}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40400d5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000e40)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)) 02:02:21 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_io_uring_complete(0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4eeceefc8e05182}, 0x40440c0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x5, 0x81, 0x3f, 0x0, 0x6, 0x4128, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x2380, 0x941, 0x3, 0x1, 0x0, 0x80000001, 0x7, 0x0, 0x10001, 0x0, 0x1000}, 0x0, 0xb, r0, 0x8) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x81, 0x8, 0x2, 0x0, 0xe9c5, 0x80, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x80a, 0x8, 0x9, 0x1, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x0, 0x1}, 0x0, 0x1, r1, 0x3) r2 = pidfd_open(0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x1, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x1840, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) syz_io_uring_complete(0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc01030}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, 0x1, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xa4}}, 0x20000005) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4d}]}, 0x2c}}, 0x0) 02:02:21 executing program 0: r0 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000009, 0x50, 0xffffffffffffffff, 0x10000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r1, 0x8, 0x0, 0xb8a0, 0x4, 0x1}, 0x9) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x8040) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x55a}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20001850}, 0xc0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x101, 0x0) io_uring_setup(0x36b6, &(0x7f00000004c0)={0x0, 0x406e, 0x10, 0x1, 0x103, 0x0, r4}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x6ba47bd7fccb6eb5}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe8, r6, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x479}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3d}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40840}, 0x4000010) get_mempolicy(&(0x7f0000000780), &(0x7f00000007c0), 0x9, &(0x7f0000ffc000/0x4000)=nil, 0x2) get_mempolicy(&(0x7f0000000800), &(0x7f0000000840), 0x6, &(0x7f0000ffb000/0x4000)=nil, 0x5) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r4) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r8, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x627}]}, 0x38}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 02:02:21 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) keyctl$negate(0xd, r0, 0x1, r0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, 0xffffffffffffffff, 0x8000000) 02:02:21 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, 0xffffffffffffffff, 0x8000000) 02:02:21 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_io_uring_complete(0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4eeceefc8e05182}, 0x40440c0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x5, 0x81, 0x3f, 0x0, 0x6, 0x4128, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x2380, 0x941, 0x3, 0x1, 0x0, 0x80000001, 0x7, 0x0, 0x10001, 0x0, 0x1000}, 0x0, 0xb, r0, 0x8) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x81, 0x8, 0x2, 0x0, 0xe9c5, 0x80, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x80a, 0x8, 0x9, 0x1, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x0, 0x1}, 0x0, 0x1, r1, 0x3) r2 = pidfd_open(0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x1, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x1840, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) syz_io_uring_complete(0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4d}]}, 0x2c}}, 0x0) 02:02:22 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xd2, 0x77}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'ghash-generic\x00'}}, &(0x7f0000000240)="8bfcf424219a032de8900fe39ce5f39a1e8e2a9c5cabd2d0eca8e606201e512b8997fea0c04cdc6a0638eb8d28e60c23eec7c68060ecb812b8b82f3e1a1c76d0c436080a047da869be34771a1eeaf9d88a0091052aee6ac29d0d7cf1ae6863abcb1a914b7088be8a16bdce26be5b29b1e72f5065a02ad1ebe3a5d90a011d37d34176138026e91c69b9180d317fef9ce475ab3f800a77bf1785c5c497ab5ff2e5e172f8b16c0b204a67cd9dfe3d1d1ba7507f6c640cbe4447b9dab96d558e3a821ee14e391eb7436aa7968e210c15bb7a0638", &(0x7f0000000340)=""/119) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, 0xffffffffffffffff, 0x8000000) 02:02:22 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socketpair(0x27, 0x1, 0x401, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb1c7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x90}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24044001}, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x10) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x420600, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r9, 0x320, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008805}, 0x4008001) socketpair(0xb, 0x80000, 0x7, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r10, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x78, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xccc}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3ff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x10000}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xbf1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfa6a}]}, 0x54}}, 0x8000) [ 179.658577] Bluetooth: hci5: command 0x0406 tx timeout [ 179.659162] Bluetooth: hci0: command 0x0406 tx timeout [ 179.659663] Bluetooth: hci1: command 0x0406 tx timeout [ 179.660204] Bluetooth: hci3: command 0x0406 tx timeout [ 179.660697] Bluetooth: hci2: command 0x0406 tx timeout [ 179.662227] Bluetooth: hci4: command 0x0406 tx timeout [ 184.263115] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 184.263880] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.264445] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.265232] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 184.265974] Call Trace: [ 184.266236] [ 184.266504] __schedule+0x893/0x2470 [ 184.266859] ? io_schedule_timeout+0x150/0x150 [ 184.267320] ? do_raw_spin_lock+0x121/0x260 [ 184.267744] ? rwlock_bug.part.0+0x90/0x90 [ 184.268227] schedule+0xda/0x1b0 [ 184.268554] rescuer_thread+0x851/0xdb0 [ 184.268934] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.269446] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.269907] ? lockdep_hardirqs_on+0x79/0x100 [ 184.270362] ? worker_thread+0x1260/0x1260 [ 184.272880] kthread+0x2ed/0x3a0 [ 184.274150] ? kthread_complete_and_exit+0x40/0x40 [ 184.276252] ret_from_fork+0x22/0x30 [ 184.276629] [ 184.276852] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 184.277454] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.277928] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.278635] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 184.279402] Call Trace: [ 184.279641] [ 184.279860] __schedule+0x893/0x2470 [ 184.280303] ? io_schedule_timeout+0x150/0x150 [ 184.280725] ? do_raw_spin_lock+0x121/0x260 [ 184.281183] ? rwlock_bug.part.0+0x90/0x90 [ 184.286675] schedule+0xda/0x1b0 [ 184.287035] rescuer_thread+0x851/0xdb0 [ 184.287419] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.287879] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.288378] ? lockdep_hardirqs_on+0x79/0x100 [ 184.288802] ? worker_thread+0x1260/0x1260 [ 184.289232] kthread+0x2ed/0x3a0 [ 184.289544] ? kthread_complete_and_exit+0x40/0x40 [ 184.290001] ret_from_fork+0x22/0x30 [ 184.290375] [ 184.290638] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 184.291276] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.291858] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.292606] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 184.293488] Call Trace: [ 184.293729] [ 184.294030] __schedule+0x893/0x2470 [ 184.294403] ? io_schedule_timeout+0x150/0x150 [ 184.294853] ? do_raw_spin_lock+0x121/0x260 [ 184.295287] ? rwlock_bug.part.0+0x90/0x90 [ 184.295697] schedule+0xda/0x1b0 [ 184.296047] rescuer_thread+0x851/0xdb0 [ 184.296428] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.296893] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.297387] ? lockdep_hardirqs_on+0x79/0x100 [ 184.297820] ? worker_thread+0x1260/0x1260 [ 184.298248] kthread+0x2ed/0x3a0 [ 184.298590] ? kthread_complete_and_exit+0x40/0x40 [ 184.299118] ret_from_fork+0x22/0x30 [ 184.299495] [ 184.299719] INFO: task netns:6 blocked for more than 143 seconds. [ 184.300290] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.300767] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.301539] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 184.302547] Call Trace: [ 184.302808] [ 184.303072] __schedule+0x893/0x2470 [ 184.303510] ? io_schedule_timeout+0x150/0x150 [ 184.304045] ? do_raw_spin_lock+0x121/0x260 [ 184.304566] ? rwlock_bug.part.0+0x90/0x90 [ 184.305121] schedule+0xda/0x1b0 [ 184.305542] rescuer_thread+0x851/0xdb0 [ 184.306030] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.306529] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.307063] ? lockdep_hardirqs_on+0x79/0x100 [ 184.307559] ? worker_thread+0x1260/0x1260 [ 184.308010] kthread+0x2ed/0x3a0 [ 184.308357] ? kthread_complete_and_exit+0x40/0x40 [ 184.308842] ret_from_fork+0x22/0x30 [ 184.309279] [ 184.309511] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 184.310160] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.310684] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.311434] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 184.312268] Workqueue: 0x0 (rcu_gp) [ 184.312639] Call Trace: [ 184.312889] [ 184.313138] __schedule+0x893/0x2470 [ 184.313530] ? io_schedule_timeout+0x150/0x150 [ 184.314014] schedule+0xda/0x1b0 [ 184.314363] worker_thread+0x15f/0x1260 [ 184.314808] ? process_one_work+0x16a0/0x16a0 [ 184.315282] kthread+0x2ed/0x3a0 [ 184.315602] ? kthread_complete_and_exit+0x40/0x40 [ 184.316078] ret_from_fork+0x22/0x30 [ 184.316456] [ 184.316688] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 184.317350] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.317877] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.318743] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 184.319610] Workqueue: 0x0 (events_highpri) [ 184.320104] Call Trace: [ 184.320375] [ 184.320611] __schedule+0x893/0x2470 [ 184.321036] ? io_schedule_timeout+0x150/0x150 [ 184.321517] schedule+0xda/0x1b0 [ 184.321905] worker_thread+0x15f/0x1260 [ 184.322366] ? process_one_work+0x16a0/0x16a0 [ 184.322832] kthread+0x2ed/0x3a0 [ 184.323207] ? kthread_complete_and_exit+0x40/0x40 [ 184.323700] ret_from_fork+0x22/0x30 [ 184.324134] [ 184.324380] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 184.325080] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.325605] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.326441] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 184.327328] Call Trace: [ 184.327589] [ 184.327833] __schedule+0x893/0x2470 [ 184.328290] ? io_schedule_timeout+0x150/0x150 [ 184.328745] ? do_raw_spin_lock+0x121/0x260 [ 184.329258] ? rwlock_bug.part.0+0x90/0x90 [ 184.329714] schedule+0xda/0x1b0 [ 184.330105] rescuer_thread+0x851/0xdb0 [ 184.330568] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.331115] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.331646] ? lockdep_hardirqs_on+0x79/0x100 [ 184.332148] ? worker_thread+0x1260/0x1260 [ 184.332593] kthread+0x2ed/0x3a0 [ 184.332956] ? kthread_complete_and_exit+0x40/0x40 [ 184.333556] ret_from_fork+0x22/0x30 [ 184.334000] [ 184.334260] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 184.334945] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.335444] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.336143] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 184.336889] Call Trace: [ 184.337156] [ 184.337378] __schedule+0x893/0x2470 [ 184.337733] ? io_schedule_timeout+0x150/0x150 [ 184.338174] ? mark_held_locks+0x9e/0xe0 [ 184.338653] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.339269] schedule+0xda/0x1b0 [ 184.339648] rcu_tasks_one_gp+0x3db/0xc10 [ 184.340141] rcu_tasks_kthread+0x80/0xa0 [ 184.340600] ? rcu_tasks_postscan+0x10/0x10 [ 184.341107] kthread+0x2ed/0x3a0 [ 184.341481] ? kthread_complete_and_exit+0x40/0x40 [ 184.342090] ret_from_fork+0x22/0x30 [ 184.342509] [ 184.342754] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 184.343500] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.344066] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.344845] task:kworker/1:0 state:I stack:29760 pid:20 ppid:2 flags:0x00004000 [ 184.345685] Workqueue: 0x0 (ata_sff) [ 184.346119] Call Trace: [ 184.346387] [ 184.346667] __schedule+0x893/0x2470 [ 184.347113] ? io_schedule_timeout+0x150/0x150 [ 184.347608] schedule+0xda/0x1b0 [ 184.347967] worker_thread+0x15f/0x1260 [ 184.348422] ? process_one_work+0x16a0/0x16a0 [ 184.348885] kthread+0x2ed/0x3a0 [ 184.349292] ? kthread_complete_and_exit+0x40/0x40 [ 184.349810] ret_from_fork+0x22/0x30 [ 184.350259] [ 184.350503] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 184.351187] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.351705] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.352454] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 184.353295] Workqueue: 0x0 (kblockd) [ 184.353702] Call Trace: [ 184.353966] [ 184.354235] __schedule+0x893/0x2470 [ 184.354656] ? io_schedule_timeout+0x150/0x150 [ 184.355163] schedule+0xda/0x1b0 [ 184.355517] worker_thread+0x15f/0x1260 [ 184.355954] ? process_one_work+0x16a0/0x16a0 [ 184.356440] kthread+0x2ed/0x3a0 [ 184.356793] ? kthread_complete_and_exit+0x40/0x40 [ 184.357328] ret_from_fork+0x22/0x30 [ 184.357747] [ 184.358067] [ 184.358067] Showing all locks held in the system: [ 184.358721] 1 lock held by rcu_tasks_kthre/11: [ 184.359195] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 184.360203] 1 lock held by khungtaskd/25: [ 184.360606] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 184.361534] 1 lock held by in:imklog/212: [ 184.361931] #0: ffff88800a0199e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 184.362817] 2 locks held by syz-executor/4417: [ 184.363288] [ 184.363464] ============================================= [ 184.363464] [ 187.866694] Bluetooth: hci7: command 0x0406 tx timeout [ 187.867279] Bluetooth: hci6: command 0x0406 tx timeout 02:02:36 executing program 0: r0 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000009, 0x50, 0xffffffffffffffff, 0x10000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r1, 0x8, 0x0, 0xb8a0, 0x4, 0x1}, 0x9) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x8040) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x55a}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20001850}, 0xc0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x101, 0x0) io_uring_setup(0x36b6, &(0x7f00000004c0)={0x0, 0x406e, 0x10, 0x1, 0x103, 0x0, r4}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x6ba47bd7fccb6eb5}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe8, r6, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x479}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3d}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40840}, 0x4000010) get_mempolicy(&(0x7f0000000780), &(0x7f00000007c0), 0x9, &(0x7f0000ffc000/0x4000)=nil, 0x2) get_mempolicy(&(0x7f0000000800), &(0x7f0000000840), 0x6, &(0x7f0000ffb000/0x4000)=nil, 0x5) syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 02:02:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socketpair(0x27, 0x1, 0x401, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb1c7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x90}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24044001}, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x10) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x420600, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r9, 0x320, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008805}, 0x4008001) socketpair(0xb, 0x80000, 0x7, &(0x7f0000000680)) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x78, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xccc}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3ff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x10000}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xbf1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfa6a}]}, 0x54}}, 0x8000) 02:02:36 executing program 1: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5a000100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x24008040) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040880}, 0x20008000) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80010440}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x5, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x20008800) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "9b4870ec3767fb1feecabdd05c3917ee"}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x154, 0x0, 0x10, 0x70bd2c, 0xfff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x410}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb8}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6da}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x62b}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3240}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xba}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xdad}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0xc801}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4008800) r3 = socket(0x15, 0x6, 0x8) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="37d2cd6a46e7"}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40002) r4 = syz_io_uring_complete(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x3c, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xbaa}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}]}, 0x3c}}, 0x110) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x0, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7f}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40400d5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000e40)) 02:02:36 executing program 3: socket$packet(0x11, 0x2, 0x300) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x200c4}, 0x80) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4044004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048054}, 0x40) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x100, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x24}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0xc}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x2001}, 0x8840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) socketpair(0x23, 0x6, 0x5, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x0, 0x12c, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) socketpair(0x1a, 0x1, 0x9, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044090}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x3, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x800) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001640)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000000a40)={0xbb8, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x8}, 0xbc, 0x3f, 0x4, 0x800, 0x18, 'syz0\x00', "cc0cc613c39b68fcb43bf5e8713278d025a25c2c2a8206cda67bfd20f2223a87", "40c78e6340b8ef1e4584c96b0b66b5e0b93d50579004c88027b79af60de4910e", [{0x3ff, 0x1, {0x2, 0x76a903df}}, {0x3, 0x7ff, {0x2}}, {0x9, 0x400, {0x1, 0x8}}, {0x80, 0xedb, {0x3, 0x3}}, {0x3, 0x9, {0x2, 0x4}}, {0x4, 0x81, {0x2, 0x38a1}}, {0x5, 0x7, {0x2, 0xffffffe0}}, {0x3ff, 0x67, {0x0, 0xe0c}}, {0xfff, 0x6, {0x1, 0xfffffff9}}, {0xfffb, 0x401, {0x1, 0x81}}, {0x8000, 0x7, {0x3, 0x2}}, {0x80, 0xfffa, {0x0, 0x66}}, {0x3ff, 0x44f, {0x1, 0x100}}, {0x6c23, 0x2, {0x1, 0x2}}, {0x7, 0x8000, {0x1, 0x3}}, {0x9, 0x0, {0x3, 0xd6}}, {0x200, 0x0, {0x8055bb359099c487, 0x8}}, {0xb80, 0xe2c, {0x3, 0x97}}, {0x3, 0x3, {0x1, 0x5}}, {0xfff, 0x8b, {0x3, 0x93}}, {0x3ff, 0x3, {0x2, 0x7}}, {0x7, 0xffff, {0x2, 0x6}}, {0x3, 0x4, {0x3, 0xffffff94}}, {0x7, 0x2, {0x1, 0x3}}, {0x9, 0x4, {0x2, 0x3}}, {0xfff, 0x4, {0x0, 0x1}}, {0xfffd, 0xffff, {0x1, 0xfffffffa}}, {0x7bba, 0x1f, {0x2, 0x9}}, {0x5ac, 0xfffa, {0x2, 0x800}}, {0x7, 0x0, {0x1, 0x5}}, {0x1000, 0x2, {0x3, 0x5}}, {0x6, 0x3, {0x1, 0x81}}, {0x0, 0x4, {0x1, 0xef6d}}, {0x1, 0x1, {0x2, 0x10000}}, {0x3f, 0x81, {0x0, 0x2}}, {0x2, 0x8966, {0x2, 0x9}}, {0x5, 0x40, {0x3, 0x8000}}, {0x101, 0x8000, {0x1, 0xfffffffe}}, {0x6, 0x9, {0x3, 0x2}}, {0x3, 0x7, {0x0, 0x101}}]}}}, {{0x254, 0x1, {{0x2, 0x64a}, 0xff, 0x7f, 0x2, 0xc92, 0xd, 'syz0\x00', "5c860f3c6791e89ff06f5ac820d6fc492a04fbb5ed2480429a70d9c2f272af2f", "775a84e47f380815c66a0cd56030c9f30808a922a5754aeca93bf353625a71a4", [{0x2, 0x2, {0x2, 0x3ff}}, {0x5, 0x7, {0x3, 0xffffffe0}}, {0x0, 0x7f, {0x1, 0x5}}, {0x68, 0xfffb, {0x0, 0x400}}, {0x200, 0xff81, {0x2, 0x1ff}}, {0x81, 0x6}, {0x1000, 0x7, {0x2, 0x8}}, {0x7fff, 0x7, {0x1}}, {0x5, 0x584a, {0x2, 0x5}}, {0x6, 0x401, {0x3}}, {0x1f, 0x101}, {0x0, 0x3, {0x0, 0x8}}, {0x0, 0x80, {0x1, 0xfffffff7}}, {0x567, 0x60, {0x0, 0x1f}}, {0xffff, 0x8000, {0x1, 0xe24}}, {0x130, 0x3}, {0x8, 0xe4, {0x1, 0x7}}, {0x80, 0x6, {0x3, 0x3f}}, {0xffff, 0x0, {0x1, 0x6}}, {0x6, 0x1, {0x3, 0x1}}, {0x5, 0x6, {0x3, 0xffff}}, {0x7, 0x800, {0x1, 0x5}}, {0x7ff, 0x7fff, {0x2, 0x7}}, {0x57b3, 0x7, {0x3, 0x6b69}}, {0x1, 0xfff, {0x2, 0x20d1}}, {0x3f, 0x3, {0x2, 0x3}}, {0xe25c, 0x7ff, {0x1, 0x400}}, {0x6, 0x9, {0x0, 0x10000}}, {0xb4, 0x8001, {0x3, 0x1}}, {0x2, 0x0, {0x2}}, {0x401, 0x20, {0x3, 0x6d51}}, {0x2, 0x0, {0x2, 0x4}}, {0x4bb, 0x1, {0x1, 0x101}}, {0x1, 0x66d8, {0x1, 0x3ff}}, {0x9, 0x6, {0x0, 0xb2a}}, {0x8, 0x7, {0x2, 0x1}}, {0x3, 0x8001, {0x1, 0xe244}}, {0x5, 0x4, {0x2, 0x81}}, {0x0, 0x7, {0x3, 0x2}}, {0x200, 0x20, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x10001}, 0x2, 0x1f, 0xff, 0x9, 0x21, 'syz1\x00', "a705b89babab6dfa9e32db77bc20635fa3e6e06a6707847a749c95dde281ddd3", "6136742018f9e0a2903e65b3d7fbbfaf28a5db218c231747bc8d39b3e99cc91b", [{0x5, 0x7529, {0x2, 0xffff7fff}}, {0x8001, 0x1, {0x3, 0xfff}}, {0xbfc, 0x2, {0x3}}, {0xfff8, 0x0, {0x3, 0x8}}, {0x7, 0x1, {0x2, 0x4}}, {0x9, 0x8, {0x1}}, {0x1, 0x9, {0x2, 0x10000}}, {0x1, 0x4, {0x0, 0x97b5}}, {0x3, 0x6, {0x1, 0x1000}}, {0x1ff, 0x4, {0x1, 0x5}}, {0x6, 0x7f, {0x0, 0x4}}, {0x6, 0x200, {0x0, 0x8}}, {0xff, 0x7ff, {0x0, 0x7}}, {0x6, 0x0, {0x2, 0x1}}, {0xfff, 0x7ff, {0x3, 0x4}}, {0x8, 0x7fcb, {0x1, 0x6}}, {0xead, 0x8000, {0x2, 0x101}}, {0x80, 0xff, {0x2, 0x101}}, {0x7, 0x777, {0x0, 0xfffffffa}}, {0x3, 0x7, {0x1}}, {0x6, 0x75f6, {0x2, 0x9}}, {0x81, 0x1ff, {0x3, 0x6}}, {0x8001, 0xe93f, {0x0, 0x2}}, {0x401, 0x7f, {0x0, 0x3}}, {0x7ff, 0x3f, {0x2, 0x1}}, {0x6, 0x7f, {0x0, 0x10001}}, {0x1, 0x40, {0x0, 0x80000001}}, {0x1ff, 0xb62, {0x3, 0x8000}}, {0x81, 0x3, {0x0, 0x1}}, {0xc11d, 0x1, {0x2, 0x3ff}}, {0x1fb, 0x6, {0x3, 0x9}}, {0x47b, 0x3, {0x3, 0x4}}, {0x3, 0x0, {0x3, 0x3}}, {0x200, 0x294, {0x3, 0x1}}, {0x9, 0xfd0b, {0x1, 0xfff}}, {0x2, 0x3e75, {0x1, 0x6}}, {0x30, 0x4, {0x3, 0x6573}}, {0x9, 0x0, {0x2, 0x4}}, {0x8, 0x0, {0x2, 0x3}}, {0x5c, 0x3ff, {0x0, 0xc9c}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0xd9, 0x3, 0xfe01, 0x1f, 0x2, 'syz0\x00', "4124a1acdba91a2b60b109fe8bb97a05c7be8ddda573f04fadcf9351a800e4b4", "e822d259f11da6d077d8d8ea19ffca8dc3dff54ea37d487b510cc24c1a0979b2", [{0x9, 0x81, {0x3, 0x7f}}, {0x5, 0x4, {0x0, 0x8}}, {0x9, 0x2, {0x0, 0x74d}}, {0x6, 0x7f, {0x1, 0x5}}, {0x3, 0x9, {0x1, 0x7fffffff}}, {0x6, 0x1000, {0x3, 0x81}}, {0x1, 0x8, {0x1, 0x4}}, {0x4, 0x8, {0x2, 0xd59d}}, {0xf783, 0xf185, {0x3, 0x6}}, {0x1, 0x3, {0x3, 0x800}}, {0x8, 0x8001, {0x2, 0x5}}, {0x1129, 0x101, {0x1}}, {0x7, 0x3, {0x2, 0x5}}, {0x7, 0x0, {0x3, 0x100}}, {0x401, 0x5, {0x1, 0x4}}, {0x81, 0x4, {0x1, 0x5}}, {0x5, 0x800, {0x0, 0x2}}, {0x7f, 0xd, {0x3, 0x230}}, {0x4, 0x7, {0x1, 0x60}}, {0x8, 0x1000, {0x0, 0x2}}, {0x8000, 0x1, {0x3, 0x8}}, {0x44bb, 0x2, {0x1, 0x7fbf}}, {0x3, 0x5, {0x2, 0x3}}, {0x81, 0x6, {0x1, 0x2}}, {0x3f, 0x4b0, {0x1, 0x8}}, {0x8, 0x8, {0x2, 0x1}}, {0x9, 0xba54, {0x3, 0x401}}, {0x0, 0xef, {0x3, 0x7}}, {0x4, 0x6, {0x0, 0x1f}}, {0x5, 0x5, {0x3, 0x5}}, {0x6, 0x2, {0x3, 0x6}}, {0x5, 0x8000, {0x0, 0x8001}}, {0x8, 0x1, {0x3, 0x5}}, {0xbe, 0x1ba3, {0x2, 0x1}}, {0x4, 0x9, {0x2, 0x9}}, {0x4236, 0x0, {0x2, 0x6}}, {0x7, 0x1000, {0x3, 0x4}}, {0x996, 0x9, {0x1, 0x5b}}, {0x3ff, 0x8, {0x1, 0xffffffff}}, {0x7, 0x800, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x4, 0x40, 0x1, 0x9, 0xe, 'syz0\x00', "e438546755cbe33290ee799e9fba1dc36280a39dece7341a663ecd99dbdf4bca", "11b3643b75edc510ecfedc0c43b2b0d9a3dd1d127857de4ef8eeb5d19404987d", [{0x15, 0x20, {0x3}}, {0xff38, 0x9, {0x1, 0x5}}, {0x4f4, 0x1f, {0x2, 0x40}}, {0x56f, 0x1, {0x2, 0x1f}}, {0xdba, 0x31, {0x0, 0x6}}, {0x20, 0x3, {0x1, 0x8001}}, {0x5, 0x3, {0x1, 0x8}}, {0x1, 0x3, {0x2, 0x9}}, {0xfff, 0x9, {0x1, 0x1f}}, {0x20, 0x1000, {0x3, 0x5f}}, {0x7f, 0x800, {0x3, 0x964f}}, {0x1f, 0xb0, {0x0, 0xcb4}}, {0x0, 0xfffd, {0x1}}, {0x5, 0xcc, {0x3, 0x6}}, {0x0, 0xfff7, {0x3, 0x9}}, {0x4ac, 0x9, {0x0, 0x3}}, {0xef, 0x401, {0x3}}, {0x1, 0x1, {0x0, 0x32e9fcc1}}, {0x1, 0x4, {0x0, 0x8}}, {0x7, 0x100, {0x2, 0x1f}}, {0x1, 0x100, {0x0, 0x6}}, {0x101, 0xee8f, {0x2, 0x77266521}}, {0x6, 0x7, {0x1, 0x7f}}, {0xffc1, 0x2, {0x3, 0xff}}, {0x20, 0xd158, {0x3, 0x80000001}}, {0x20, 0x0, {0x1, 0x1}}, {0x60b, 0x0, {0x2, 0x3}}, {0x4, 0x2, {0x0, 0x8}}, {0x0, 0x3, {0x2, 0x5}}, {0x1, 0x1, {0x1, 0x8}}, {0x1, 0x2, {0x3, 0xff}}, {0x0, 0xfffb, {0x2, 0xe766}}, {0x0, 0x2b0, {0x2, 0x8}}, {0x2, 0x8, {0x2, 0xfffffffa}}, {0x200, 0x7, {0x2, 0x3f}}, {0x40, 0x5, {0x0, 0x5}}, {0xa983, 0x3, {0x1, 0x2}}, {0x5, 0x7, {0x0, 0x7}}, {0x739, 0x4, {0x2, 0x34}}, {0x5c5a, 0x1f, {0x3, 0x7f}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r7 = socket(0x29, 0xe, 0x43) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x177b52fde52ccb5}, 0x4080) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x54, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x48}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x37}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x16db301d812be3c7) 02:02:36 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x20010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x158, &(0x7f0000000000)=0x81, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000040)=0x1, 0x0, 0x4) r1 = syz_io_uring_complete(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff7}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2fb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4abf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8801}, 0x20010000) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = io_uring_setup(0x5308, &(0x7f0000000380)={0x0, 0x6953, 0x10, 0x0, 0x1e6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff0000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) syz_io_uring_submit(r0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r1, 0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x410102, 0x12345}, 0x1f) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2a5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x92}, 0x8000) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000007c0)=0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r4) 02:02:36 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_io_uring_complete(0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4eeceefc8e05182}, 0x40440c0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x5, 0x81, 0x3f, 0x0, 0x6, 0x4128, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x2380, 0x941, 0x3, 0x1, 0x0, 0x80000001, 0x7, 0x0, 0x10001, 0x0, 0x1000}, 0x0, 0xb, r0, 0x8) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x81, 0x8, 0x2, 0x0, 0xe9c5, 0x80, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x80a, 0x8, 0x9, 0x1, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x0, 0x1}, 0x0, 0x1, r1, 0x3) r2 = pidfd_open(0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x1, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x1840, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xb) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4d}]}, 0x2c}}, 0x0) 02:02:36 executing program 7: sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x8050) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x52}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe4, r4, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x44881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x44060) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x1, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008100}, 0x24010011) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x42002}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200000c1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2f3c1ed6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r3) 02:02:36 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) keyctl$chown(0x4, r0, 0xee01, r1) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, 0xffffffffffffffff, 0x8000000) 02:02:36 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_io_uring_complete(0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4eeceefc8e05182}, 0x40440c0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x5, 0x81, 0x3f, 0x0, 0x6, 0x4128, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x2380, 0x941, 0x3, 0x1, 0x0, 0x80000001, 0x7, 0x0, 0x10001, 0x0, 0x1000}, 0x0, 0xb, r0, 0x8) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x81, 0x8, 0x2, 0x0, 0xe9c5, 0x80, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x80a, 0x8, 0x9, 0x1, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x0, 0x1}, 0x0, 0x1, r1, 0x3) r2 = pidfd_open(0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x1, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x1840, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4d}]}, 0x2c}}, 0x0) 02:02:36 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0x0, 0xffffffffffffffff, 0xee00]) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, 0xffffffffffffffff, 0x8000000) 02:02:37 executing program 0: r0 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000009, 0x50, 0xffffffffffffffff, 0x10000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r1, 0x8, 0x0, 0xb8a0, 0x4, 0x1}, 0x9) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x8040) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x55a}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20001850}, 0xc0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x101, 0x0) io_uring_setup(0x36b6, &(0x7f00000004c0)={0x0, 0x406e, 0x10, 0x1, 0x103, 0x0, r4}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x6ba47bd7fccb6eb5}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe8, r6, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x9c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x479}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3d}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40840}, 0x4000010) get_mempolicy(&(0x7f0000000780), &(0x7f00000007c0), 0x9, &(0x7f0000ffc000/0x4000)=nil, 0x2) get_mempolicy(&(0x7f0000000800), &(0x7f0000000840), 0x6, &(0x7f0000ffb000/0x4000)=nil, 0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 02:02:37 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, 0xffffffffffffffff, 0x8000000) 02:02:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socketpair(0x27, 0x1, 0x401, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb1c7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x90}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24044001}, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x10) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x420600, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r8) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r9, 0x320, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008805}, 0x4008001) socketpair(0xb, 0x80000, 0x7, &(0x7f0000000680)) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x78, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xccc}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, 0x0, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3ff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x10000}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xbf1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfa6a}]}, 0x54}}, 0x8000) 02:02:37 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_io_uring_complete(0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4eeceefc8e05182}, 0x40440c0) openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x9) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x4, 0x5, 0x81, 0x3f, 0x0, 0x6, 0x4128, 0xb, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x2380, 0x941, 0x3, 0x1, 0x0, 0x80000001, 0x7, 0x0, 0x10001, 0x0, 0x1000}, 0x0, 0xb, r0, 0x8) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x81, 0x8, 0x2, 0x0, 0xe9c5, 0x80, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x80a, 0x8, 0x9, 0x1, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x0, 0x1}, 0x0, 0x1, r1, 0x3) r2 = pidfd_open(0xffffffffffffffff, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x1, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7ff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4d}]}, 0x2c}}, 0x0) 02:02:37 executing program 6: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x20010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x158, &(0x7f0000000000)=0x81, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r0, 0x114, &(0x7f0000000040)=0x1, 0x0, 0x4) r1 = syz_io_uring_complete(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffff7}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2fb}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4abf}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8801}, 0x20010000) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = io_uring_setup(0x5308, &(0x7f0000000380)={0x0, 0x6953, 0x10, 0x0, 0x1e6, 0x0, r1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff0000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) syz_io_uring_submit(r0, 0x0, &(0x7f0000000680)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r1, 0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x410102, 0x12345}, 0x1f) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2a5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x92}, 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r4) 02:02:37 executing program 7: sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x8050) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x52}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xe4, r4, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x44881) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x44060) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x1, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008100}, 0x24010011) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x42002}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200000c1) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2f3c1ed6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r3) 02:02:37 executing program 2: keyctl$link(0x8, 0x0, 0xfffffffffffffff8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x11, 0xffffffffffffffff, 0x8000000) 02:02:37 executing program 3: socket$packet(0x11, 0x2, 0x300) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x200c4}, 0x80) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4044004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048054}, 0x40) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x100, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x24}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0xc}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x2001}, 0x8840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) socketpair(0x23, 0x6, 0x5, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, 0x0, 0x12c, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) socketpair(0x1a, 0x1, 0x9, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044090}, 0x20000000) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, 0x3, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x800) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000001640)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f0000000a40)={0xbb8, 0x1, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x8}, 0xbc, 0x3f, 0x4, 0x800, 0x18, 'syz0\x00', "cc0cc613c39b68fcb43bf5e8713278d025a25c2c2a8206cda67bfd20f2223a87", "40c78e6340b8ef1e4584c96b0b66b5e0b93d50579004c88027b79af60de4910e", [{0x3ff, 0x1, {0x2, 0x76a903df}}, {0x3, 0x7ff, {0x2}}, {0x9, 0x400, {0x1, 0x8}}, {0x80, 0xedb, {0x3, 0x3}}, {0x3, 0x9, {0x2, 0x4}}, {0x4, 0x81, {0x2, 0x38a1}}, {0x5, 0x7, {0x2, 0xffffffe0}}, {0x3ff, 0x67, {0x0, 0xe0c}}, {0xfff, 0x6, {0x1, 0xfffffff9}}, {0xfffb, 0x401, {0x1, 0x81}}, {0x8000, 0x7, {0x3, 0x2}}, {0x80, 0xfffa, {0x0, 0x66}}, {0x3ff, 0x44f, {0x1, 0x100}}, {0x6c23, 0x2, {0x1, 0x2}}, {0x7, 0x8000, {0x1, 0x3}}, {0x9, 0x0, {0x3, 0xd6}}, {0x200, 0x0, {0x8055bb359099c487, 0x8}}, {0xb80, 0xe2c, {0x3, 0x97}}, {0x3, 0x3, {0x1, 0x5}}, {0xfff, 0x8b, {0x3, 0x93}}, {0x3ff, 0x3, {0x2, 0x7}}, {0x7, 0xffff, {0x2, 0x6}}, {0x3, 0x4, {0x3, 0xffffff94}}, {0x7, 0x2, {0x1, 0x3}}, {0x9, 0x4, {0x2, 0x3}}, {0xfff, 0x4, {0x0, 0x1}}, {0xfffd, 0xffff, {0x1, 0xfffffffa}}, {0x7bba, 0x1f, {0x2, 0x9}}, {0x5ac, 0xfffa, {0x2, 0x800}}, {0x7, 0x0, {0x1, 0x5}}, {0x1000, 0x2, {0x3, 0x5}}, {0x6, 0x3, {0x1, 0x81}}, {0x0, 0x4, {0x1, 0xef6d}}, {0x1, 0x1, {0x2, 0x10000}}, {0x3f, 0x81, {0x0, 0x2}}, {0x2, 0x8966, {0x2, 0x9}}, {0x5, 0x40, {0x3, 0x8000}}, {0x101, 0x8000, {0x1, 0xfffffffe}}, {0x6, 0x9, {0x3, 0x2}}, {0x3, 0x7, {0x0, 0x101}}]}}}, {{0x254, 0x1, {{0x2, 0x64a}, 0xff, 0x7f, 0x2, 0xc92, 0xd, 'syz0\x00', "5c860f3c6791e89ff06f5ac820d6fc492a04fbb5ed2480429a70d9c2f272af2f", "775a84e47f380815c66a0cd56030c9f30808a922a5754aeca93bf353625a71a4", [{0x2, 0x2, {0x2, 0x3ff}}, {0x5, 0x7, {0x3, 0xffffffe0}}, {0x0, 0x7f, {0x1, 0x5}}, {0x68, 0xfffb, {0x0, 0x400}}, {0x200, 0xff81, {0x2, 0x1ff}}, {0x81, 0x6}, {0x1000, 0x7, {0x2, 0x8}}, {0x7fff, 0x7, {0x1}}, {0x5, 0x584a, {0x2, 0x5}}, {0x6, 0x401, {0x3}}, {0x1f, 0x101}, {0x0, 0x3, {0x0, 0x8}}, {0x0, 0x80, {0x1, 0xfffffff7}}, {0x567, 0x60, {0x0, 0x1f}}, {0xffff, 0x8000, {0x1, 0xe24}}, {0x130, 0x3}, {0x8, 0xe4, {0x1, 0x7}}, {0x80, 0x6, {0x3, 0x3f}}, {0xffff, 0x0, {0x1, 0x6}}, {0x6, 0x1, {0x3, 0x1}}, {0x5, 0x6, {0x3, 0xffff}}, {0x7, 0x800, {0x1, 0x5}}, {0x7ff, 0x7fff, {0x2, 0x7}}, {0x57b3, 0x7, {0x3, 0x6b69}}, {0x1, 0xfff, {0x2, 0x20d1}}, {0x3f, 0x3, {0x2, 0x3}}, {0xe25c, 0x7ff, {0x1, 0x400}}, {0x6, 0x9, {0x0, 0x10000}}, {0xb4, 0x8001, {0x3, 0x1}}, {0x2, 0x0, {0x2}}, {0x401, 0x20, {0x3, 0x6d51}}, {0x2, 0x0, {0x2, 0x4}}, {0x4bb, 0x1, {0x1, 0x101}}, {0x1, 0x66d8, {0x1, 0x3ff}}, {0x9, 0x6, {0x0, 0xb2a}}, {0x8, 0x7, {0x2, 0x1}}, {0x3, 0x8001, {0x1, 0xe244}}, {0x5, 0x4, {0x2, 0x81}}, {0x0, 0x7, {0x3, 0x2}}, {0x200, 0x20, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x10001}, 0x2, 0x1f, 0xff, 0x9, 0x21, 'syz1\x00', "a705b89babab6dfa9e32db77bc20635fa3e6e06a6707847a749c95dde281ddd3", "6136742018f9e0a2903e65b3d7fbbfaf28a5db218c231747bc8d39b3e99cc91b", [{0x5, 0x7529, {0x2, 0xffff7fff}}, {0x8001, 0x1, {0x3, 0xfff}}, {0xbfc, 0x2, {0x3}}, {0xfff8, 0x0, {0x3, 0x8}}, {0x7, 0x1, {0x2, 0x4}}, {0x9, 0x8, {0x1}}, {0x1, 0x9, {0x2, 0x10000}}, {0x1, 0x4, {0x0, 0x97b5}}, {0x3, 0x6, {0x1, 0x1000}}, {0x1ff, 0x4, {0x1, 0x5}}, {0x6, 0x7f, {0x0, 0x4}}, {0x6, 0x200, {0x0, 0x8}}, {0xff, 0x7ff, {0x0, 0x7}}, {0x6, 0x0, {0x2, 0x1}}, {0xfff, 0x7ff, {0x3, 0x4}}, {0x8, 0x7fcb, {0x1, 0x6}}, {0xead, 0x8000, {0x2, 0x101}}, {0x80, 0xff, {0x2, 0x101}}, {0x7, 0x777, {0x0, 0xfffffffa}}, {0x3, 0x7, {0x1}}, {0x6, 0x75f6, {0x2, 0x9}}, {0x81, 0x1ff, {0x3, 0x6}}, {0x8001, 0xe93f, {0x0, 0x2}}, {0x401, 0x7f, {0x0, 0x3}}, {0x7ff, 0x3f, {0x2, 0x1}}, {0x6, 0x7f, {0x0, 0x10001}}, {0x1, 0x40, {0x0, 0x80000001}}, {0x1ff, 0xb62, {0x3, 0x8000}}, {0x81, 0x3, {0x0, 0x1}}, {0xc11d, 0x1, {0x2, 0x3ff}}, {0x1fb, 0x6, {0x3, 0x9}}, {0x47b, 0x3, {0x3, 0x4}}, {0x3, 0x0, {0x3, 0x3}}, {0x200, 0x294, {0x3, 0x1}}, {0x9, 0xfd0b, {0x1, 0xfff}}, {0x2, 0x3e75, {0x1, 0x6}}, {0x30, 0x4, {0x3, 0x6573}}, {0x9, 0x0, {0x2, 0x4}}, {0x8, 0x0, {0x2, 0x3}}, {0x5c, 0x3ff, {0x0, 0xc9c}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0xd9, 0x3, 0xfe01, 0x1f, 0x2, 'syz0\x00', "4124a1acdba91a2b60b109fe8bb97a05c7be8ddda573f04fadcf9351a800e4b4", "e822d259f11da6d077d8d8ea19ffca8dc3dff54ea37d487b510cc24c1a0979b2", [{0x9, 0x81, {0x3, 0x7f}}, {0x5, 0x4, {0x0, 0x8}}, {0x9, 0x2, {0x0, 0x74d}}, {0x6, 0x7f, {0x1, 0x5}}, {0x3, 0x9, {0x1, 0x7fffffff}}, {0x6, 0x1000, {0x3, 0x81}}, {0x1, 0x8, {0x1, 0x4}}, {0x4, 0x8, {0x2, 0xd59d}}, {0xf783, 0xf185, {0x3, 0x6}}, {0x1, 0x3, {0x3, 0x800}}, {0x8, 0x8001, {0x2, 0x5}}, {0x1129, 0x101, {0x1}}, {0x7, 0x3, {0x2, 0x5}}, {0x7, 0x0, {0x3, 0x100}}, {0x401, 0x5, {0x1, 0x4}}, {0x81, 0x4, {0x1, 0x5}}, {0x5, 0x800, {0x0, 0x2}}, {0x7f, 0xd, {0x3, 0x230}}, {0x4, 0x7, {0x1, 0x60}}, {0x8, 0x1000, {0x0, 0x2}}, {0x8000, 0x1, {0x3, 0x8}}, {0x44bb, 0x2, {0x1, 0x7fbf}}, {0x3, 0x5, {0x2, 0x3}}, {0x81, 0x6, {0x1, 0x2}}, {0x3f, 0x4b0, {0x1, 0x8}}, {0x8, 0x8, {0x2, 0x1}}, {0x9, 0xba54, {0x3, 0x401}}, {0x0, 0xef, {0x3, 0x7}}, {0x4, 0x6, {0x0, 0x1f}}, {0x5, 0x5, {0x3, 0x5}}, {0x6, 0x2, {0x3, 0x6}}, {0x5, 0x8000, {0x0, 0x8001}}, {0x8, 0x1, {0x3, 0x5}}, {0xbe, 0x1ba3, {0x2, 0x1}}, {0x4, 0x9, {0x2, 0x9}}, {0x4236, 0x0, {0x2, 0x6}}, {0x7, 0x1000, {0x3, 0x4}}, {0x996, 0x9, {0x1, 0x5b}}, {0x3ff, 0x8, {0x1, 0xffffffff}}, {0x7, 0x800, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x4, 0x40, 0x1, 0x9, 0xe, 'syz0\x00', "e438546755cbe33290ee799e9fba1dc36280a39dece7341a663ecd99dbdf4bca", "11b3643b75edc510ecfedc0c43b2b0d9a3dd1d127857de4ef8eeb5d19404987d", [{0x15, 0x20, {0x3}}, {0xff38, 0x9, {0x1, 0x5}}, {0x4f4, 0x1f, {0x2, 0x40}}, {0x56f, 0x1, {0x2, 0x1f}}, {0xdba, 0x31, {0x0, 0x6}}, {0x20, 0x3, {0x1, 0x8001}}, {0x5, 0x3, {0x1, 0x8}}, {0x1, 0x3, {0x2, 0x9}}, {0xfff, 0x9, {0x1, 0x1f}}, {0x20, 0x1000, {0x3, 0x5f}}, {0x7f, 0x800, {0x3, 0x964f}}, {0x1f, 0xb0, {0x0, 0xcb4}}, {0x0, 0xfffd, {0x1}}, {0x5, 0xcc, {0x3, 0x6}}, {0x0, 0xfff7, {0x3, 0x9}}, {0x4ac, 0x9, {0x0, 0x3}}, {0xef, 0x401, {0x3}}, {0x1, 0x1, {0x0, 0x32e9fcc1}}, {0x1, 0x4, {0x0, 0x8}}, {0x7, 0x100, {0x2, 0x1f}}, {0x1, 0x100, {0x0, 0x6}}, {0x101, 0xee8f, {0x2, 0x77266521}}, {0x6, 0x7, {0x1, 0x7f}}, {0xffc1, 0x2, {0x3, 0xff}}, {0x20, 0xd158, {0x3, 0x80000001}}, {0x20, 0x0, {0x1, 0x1}}, {0x60b, 0x0, {0x2, 0x3}}, {0x4, 0x2, {0x0, 0x8}}, {0x0, 0x3, {0x2, 0x5}}, {0x1, 0x1, {0x1, 0x8}}, {0x1, 0x2, {0x3, 0xff}}, {0x0, 0xfffb, {0x2, 0xe766}}, {0x0, 0x2b0, {0x2, 0x8}}, {0x2, 0x8, {0x2, 0xfffffffa}}, {0x200, 0x7, {0x2, 0x3f}}, {0x40, 0x5, {0x0, 0x5}}, {0xa983, 0x3, {0x1, 0x2}}, {0x5, 0x7, {0x0, 0x7}}, {0x739, 0x4, {0x2, 0x34}}, {0x5c5a, 0x1f, {0x3, 0x7f}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000}, 0x800) socket(0x29, 0xe, 0x43) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x54, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x48}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x37}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x16db301d812be3c7) VM DIAGNOSIS: 02:02:28 Registers: info registers vcpu 0 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000033 R11=0000000000000001 R12=0000000000000033 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056335a19de00 CR3=000000001bafc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 41565cc200000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000080000000 RBX=ffff888008c19000 RCX=0000000080000000 RDX=ffff888017355040 RSI=ffffffff81473739 RDI=ffff888008c19490 RBP=000000007fff0000 RSP=ffff888018857de0 R8 =0000000000000004 R9 =000000007fff0000 R10=000000007fff0000 R11=0000000000000001 R12=dffffc0000000000 R13=000000007fff0000 R14=ffff888018857e30 R15=000000007fff0000 RIP=ffffffff81460c3d RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6f6e302900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6f6d7491a0 CR3=000000000f298000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM01=0000000000000000 0000000000000000 3030623438613630 3638616663356134 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 2830a3e937f7dd42 00000000001381c8 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 22008602e8105c7d 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 2000000000000000 2000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000